DOJ-approved and widely accepted computer forensic methods: FTK Imager (AccessData) Tool for creating forensic images and performing live previews of file systems. Can capture volatile memory, disk images, and carve out deleted files. Can extract Internet Explorer and Edge artifacts, including deleted cache and browsing history. Supports registry and memory analysis to find traces of…
Classic Hardware Review: Diskology Disk Jockey Pro
Which feature of the Disk Jockey Pro did you find most important and why? Rapid low cost imaging Is the Disk Jockey Pro cost-prohibitive? Yes, because if you are buying anything for forensics you want to make sure the evidence is admissible. DJP was originally designed and marketed as a hard drive duplicator and diagnostic tool for…