Forensic Acquisition in Windows - FTK Imager

In this video we will use FTK Imager to create a physical disk image of a suspect drive connected to our forensic workstation via a write blocker. FTK Imager is a GUI tool for copying various types of data for forensic acquisition purposes.

🚀 Full Digital Forensic Courses → https://learn.dfir.science

010001000100011001010011011000110110100101100101011011100110001101100101
Get more Digital Forensic Science
👍 Subscribe → https://bit.ly/2Ij9Ojc
❤️ YT Member → https://bit.ly/DFIRSciMember
❤️ Patreon →   / dfirscience  

🕸️ Blog → https://DFIR.Science
🤖 Code → https://github.com/DFIRScience
🐦 Follow →   / dfirscience  
📰 DFIR Newsletter → https://bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101

Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.