NEW!
Forensic Image Extraction -- Beginner
Focus is on using AccessData FTK Imager to create a forensic image of a drive. Part 2: use AccessData FTK Imager to investigate and extract the files from a forensic image. Familiarize with free tool to easily create a forensically sound image of a drive and use the same tool examine all data on the drive including deleted files and hexadecimal representation of data.
Available Files:
FlashOne.001 FlashTwo.001 PIVOT_Instructions_ForensicImageExtraction.pdf PIVOT_Form_ForensicImageExtraction.pdfDetails:
- Challenge Type: Digital Forensics
- Skill Level: Beginner
- Time Required: 60 Minutes
- Keywords: Forensics, Windows Tools, Filesystems, Hexadecimal
- Author: Mandy Galante
- Organization: Red Bank Regional High School