Get full access to The Best Damn Cybercrime and Digital Forensics Book Period and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Start your free trial

Chapter 10. Acquiring Data, Duplicating Data, and Recovering Deleted Files

Introduction

Before data can be analyzed, it needs to be acquired. This means that the data needs to be duplicated so that the person performing the analysis can work from it without modifying the data. This means using any number of tools to duplicate the data so that an exact sector-by-sector mirror image of the disk is generated. This enables ...

Get The Best Damn Cybercrime and Digital Forensics Book Period now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now