Who was the examiner for this drive and what software was used to acquire this image?How many sectors are on this drive?
Purpose: To introduce some of the FTK Imager features which include some of the core functions related to acquiring case evidence. Application location: Virtual Computing Lab Preparation: Review user guide and lab video/slides (on Blackboard) Evidence file: Washer.E01 file (located in \\144.175.196.12\Forensic Data\Washer.E01) Questions to answer: 1. Who was the examiner for this drive and […]