Mastering Digital Forensics with FTK Imager

Exterro - Digital Forensics | FTK Imager

Exterro - Digital Forensics

Let's talk about disk forensics and data recovery. It's the last #BlueTeamMonday of this series. You'll need a few things to get started: Linux (Debian, Ubuntu, Kali, whatever) - perhaps a live-boot forensic distro like Paladin, USB hard drive adapter kit, At least 2x the size of the hard drive to be recovered worth of free space on some other hard drive (I use a 5TB external) Optional: USB TTL Serial cable, Precision screwdriver kit, USB microscope, magnifier goggles, eye loupe When responding