SUMMARY

In this chapter we discussed how to create disk images. This included imaging tools such as dcfldd, software and hardware write-blockers, techniques, and inexpensive hardware options. In the next chapter we will delve into the topic of actually mounting these images so we can begin our dead (filesystem) analysis.

CHAPTER