note
-
Drive acquisition with dc3dd
Step-by-step acquisition of a drive with dc3dd: identify the device, create a raw image with on-the-fly hashing and check the log.
Practical notes on digital forensics and incident response
Step-by-step acquisition of a drive with dc3dd: identify the device, create a raw image with on-the-fly hashing and check the log.