Chapter 6. Computer Forensic Software and Hardware
Topics we'll investigate in this chapter:
▪ Disk Imaging
▪ Forensic Software Tools
▪ Forensic Hardware Tools
Frequently Asked Questions
The quality of work in computer forensics is often based on the tools used during the investigation. To acquire and examine the data on a suspect machine or device, you must use specialized hardware and software. In this way, you can create an image of the data on the machine, allowing you to review the data without modifying it. In doing so, any evidence is protected, and is less likely to be brought into question during a trial.
In this chapter, we discuss disk imaging and introduce hardware- and software-based forensic tools. Due to the large ...