Purchase Solution

bit-by-bit image of the hard drive for forensic purposes.

Not what you're looking for?

Ask Custom Question

When collecting evidence, it should be as close to its natural state, untouched and untampered with. Therefore, when a computer hard drive is to be collected for digital evidence, it is important that it should be prevented from the computers' operating system or other software processing/changing any data on the drive. This would enable to capture the hard drive in its original state of with no interference from other software or hardware, and even the users.

Purchase this Solution

Solution Summary

When collecting evidence, it should be as close to its natural state, untouched and untampered with. Therefore, when a computer hard drive is to be collected for digital evidence, it is important that it should be prevented from the computers' operating system or other software processing/changing any data on the drive. This would enable to capture the hard drive in its original state of with no interference from other software or hardware, and even the users.

Solution Preview

Please see attached Word document for Solution.

Why it is important to have a bit-by-bit image of the hard drive for forensic purposes?

When collecting evidence, it should be as close to its natural state, untouched and untampered with. Therefore, when a computer hard drive is to be collected for digital evidence, it is important that it should be prevented from the computers' operating system or other software processing/changing any data on the drive. This would enable to capture the hard drive in its original state of with no interference from other software or hardware, and even the users.

The few reasons why a bit-by-bit image of the hard drive is important are listed as such:

1 This is the method of capturing the actual representation of data on the hard drive where no manipulation of software is involved.

2 This is the most detailed layer a data can be stored from which evidence can be recovered with a detailed analysis.

3 Sometimes, files are overwritten over bigger files, and the remaining portion is still available, ...

Purchase this Solution


Free BrainMass Quizzes
Basic UNIX commands

Use this quiz to check your knowledge of a few common UNIX commands. The quiz covers some of the most essential UNIX commands and their basic usage. If you can pass this quiz then you are clearly on your way to becoming an effective UNIX command line user.

Basic Computer Terms

We use many basic terms like bit, pixel in our usual conversations about computers. Are we aware of what these mean? This little quiz is an attempt towards discovering that.

Inserting and deleting in a linked list

This quiz tests your understanding of how to insert and delete elements in a linked list. Understanding of the use of linked lists, and the related performance aspects, is an important fundamental skill of computer science data structures.

Word 2010: Tables

Have you never worked with Tables in Word 2010? Maybe it has been a while since you have used a Table in Word and you need to brush up on your skills. Several keywords and popular options are discussed as you go through this quiz.

Javscript Basics

Quiz on basics of javascript programming language.