Computer Forensics and Investigations
Chapter 4 - Data Acquisition
Objectives
- List Digital Evidence formats
- Explain ways to determine the best acquisition methods
- Describe contingency planning for data acqusitions
- Explain how to use acquisition tools
- Describe how to validate data acquisitions
- Describe RAID acquisition methods
- Explain how to use remote network acquisition tools
- List other forensics tools available for data acquisition
Introduction
Data acquisition is the process of copying data. For computer forensics, it's the tasks of collecting digital evidence from electronic media. There are two types of data acquisition: static acquisitions and live acquisitions. In this chapter, you will learn how to perform static acquisitions from digital media.
Instructions
- Read chapter 4
- Capture an image on ProDiscover Basic, starting on page 124
- Complete the review questions at the end of chapter 4, page 148
- Do Hands-On Projects, 4-1 thru 4-4 on pages 152
- Do Case Projects 4-1 thru 4-5 on page 153
Documents |
Additional Resources
|