Forensic disk images of a Windows system: my own workflow

Every forensic analyst, during his experience, perfects his own workflow for the acquisition of forensic images.

Today I want to propose my own workflow for acquisition of physical disks on Microsoft Windows systems

Continue reading “Forensic disk images of a Windows system: my own workflow”