A client recently asked me about adding hard drive imaging into its standard incident response process. Because most of the incidents the client deals with are related to malware infections, its ...

FTK Imager by Exterro is a data preview and imaging tool that allows users to quickly assess electronic evidence to determine if further analysis with a forensic tool such as Forensic Toolkit (FTK) is ...

I've been using the Helix incident response and forensics LiveCD since it was first created. It has been an invaluable tool, but sometimes it falls short on hardware support for various SATA/SAS and ...