Video Description

This lesson covers imaging concepts. Forensic imaging is used to preserve the evidence in it's original form by creating an exact duplicate. When creating this image, be sure to consider the size of the media, number of devices and the access to the media. When collecting data; take the following steps: · Wipe media · Decide on a logical vs physical wipe · Media Acquisition Use Write blockers

Course Modules

Incident Response & Advanced Forensics