Physical acquisition tools

We've looked at the tools necessary for the collection and acquisition of physical evidence, but what tools do we need for the acquisition and extraction of digital evidence? Remember when we covered the different types of storage media back in Chapter 3, Understanding Filesystems and Storage Media? We saw that many of them had their own connectors as they were of various sizes.

Here's a list of some of the equipment required when acquiring data from evidence:

  • Write blocker (can also be software-based)
  • Card reader
  • Various adapters (USB to SATA and EIDE, USB to various types of USB)
  • Device cables such as power, SATA, EIDE, HDMI, VGA
  • Networking cables such as straight-through, crossover, console

The following image ...

Get Digital Forensics with Kali Linux now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.