Forensic imaging


Your new manager comes to you and asks you that he keeps hearing about read/write blockers for forensic imaging. He’s not sure what that is. He also is confused because he’s heard that there’s two different types (software and hardware). Also, there’s commercial and open source tools. He knows you just took a course in digital forensics so he asks you to prepare a memo for him explaining all that.

Your assignment

Research on what is a forensic read/write blocker and what is the difference between a hardware and a software version?
Research on what tools are available e.g. commercial (you buy) or open-source (free) and what types are available.
Identify some situations where it makes sense to use the hardware versions or when it makes sense to you.

Sample Solution