Whether it’s management in Law Enforcement looking for the silver bullet ‘Find Evidence’ button in Axiom (no digs at Magnet but please put that back in :)) or the large corporations incident responder needing to analyse hundreds of endpoints for one specific artefact. This is mainly due to the issue that most units have backlogs, lack of time and urgency to produce results. Quick!Īs we all know, things have moved on quite rapidly from grabbing an image of a dead box and leaving it processing in your tool of choice over the weekend. Modern day forensics and IR require answers. While working in law enforcement I was always obsessed with ensuring I had captured the ‘golden forensic image’ which for obvious reasons, is still ideal and gives you all that unallocated spacey goodness. FTK Imager is renowned the world over as the go-to forensic imaging tool.
0 kommentar(er)
