Information Technology Reference
In-Depth Information
accomplishing.the.creation.of.a.forensically.sound.image.of.a.
digital.storage.device..So.we.will.not.get.any.more.detailed.about.
how.to.make.all.the.connections.and.transfer.all.of.the.data..It.is.
only.important.for.you.to.understand.that.there.are.procedures.
and. tasks. that. must. be. accomplished. in. order. to. ensure. the.
integrity.of.data.on.either.end.of.an.acquisition.process.
If.you.are.going.to.do.this.work.yourself,.you.need.to.take.
the. time. to. become. familiar. with. these. methods. and. com-
fortable.with.these.tools..You.will.also.need.to.purchase.and.
license.the.tools.you.want.to.use..All.of.that.will.take.time.and.
money,.but.it.is.important.to.both.you.and.your.organization.
that.it.be.done.and.done.well.
If.you.do.not.feel.the.urge.to.become.a.forensics.investiga-
tor.or.expert,.your.job.will.be.to.ensure.that.you.have.access.
to.someone.with.those.skills.and.tools.
No.matter.what.method.you.choose.to.create.and.preserve.
the.forensically.sound.copies.of.data,.the.important.thing.to.
understand.is.the.necessity.to.ensure.the.integrity.of.the.data.
so.that.you.can.prove.the.data.are.the.same.after.being.cop-
ied.as.they.were.before.
As. noted,. there. are. many. good. tools. out. there. that. will.
allow.you.to.do.this.using.an.application.interface.if.you.are.
not.comfortable.with.command.lines..One.of.these. tools.is.
free. from. AccessData. and. is. called. FTK. Imager.. Of. course.
all.of.the.command.lines.are.free.to.use.as.long.as.you.have.
that.type.of.operating.system.and.the.comfort.level.to.work.
with.them.
We.reached.the.end.of.this.chapter,.so.remember.the.most.
important.points.when.you.consider.the.where.and.how.of.
electronically.stored.information..Those.are.as.follows:
•. ESI. can. be. made. dificult. to. acquire. in. many. ways,.
whether.due.to.corruption,.loss,.deletion,.encryption,.
or.loss.of.the.application.or.device.that.created.it.in.
the.irst.place.
•. The.most.important.thing.you.and.your.organization.
can.do.to.ensure.your.ESI.is.accessible.is.to.have.good.
