Intermediate

Data Acquisition

Forensic acquisition essentials: evidence handling, hashing, write blockers, FTK Imager, and KAPE to safely collect and validate data.

Duration: 3h
Labs: 2
Videos: 4
Quizzes: 2

Skills Acquired

Understand chain of custody and evidence handling
Apply hashing to validate forensic images
Work with write blockers and forensic duplicators
Use FTK Imager for disk and memory acquisition
Collect targeted data using KAPE in CLI and GUI modes

Curriculum

Data Acquisition Principles
- Fundamentals of data acquisition
- Chain of custody and errors to avoid
- Collection methodologies and best practices
Data Acquisition Tools
- Using FTK Imager for disk and memory
- Validating and verifying forensic images
- KAPE targets, modules, and acquisition process

Included in these pathways

Digital Forensics and Incident Response Pathway
Master Digital Forensics and Incident Response