Chapter 6. Computer Forensic Software and Hardware

Topics we'll investigate in this chapter:

▪ Disk Imaging
▪ Forensic Software Tools
▪ Forensic Hardware Tools
Frequently Asked Questions


The quality of work in computer forensics is often based on the tools used during the investigation. To acquire and examine the data on a suspect machine or device, you must use specialized hardware and software. In this way, you can create an image of the data on the machine, allowing you to review the data without modifying it. In doing so, any evidence is protected, and is less likely to be brought into question during a trial.
In this chapter, we discuss disk imaging and introduce hardware- and software-based forensic tools. Due to the large ...

Get Scene of the Cybercrime, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.