Tech Fixx · Video
Forensic Data Acquisition: Imaging, Chain of Custody & Analysis | Part 3
Watch this 3 min 27 sec video from the Tech Fixx channel, published .
Check that the device, software and version shown match your setup. Use the player controls for captions, playback speed and full screen where available.
Loading the player connects to YouTube. If playback is unavailable here, watch on YouTube ↗.
Captions and text transcripts
After loading the player, use its CC control to turn on captions when available. To look for a text transcript, use the Watch on YouTube link above, expand the video description and select “Show transcript” if offered.
Caption and transcript availability varies by video, and automatic captions may contain mistakes. The original channel description is separate from a transcript. Caption accuracy, audio description and text alternatives have not been verified for every video in this library.
From the video description
Original channel description, recorded . Product, software and service references in it may have changed since publication.
Forensic data acquisition aims to create a reliable working copy while preserving and documenting the original source. Part 3 of this digital-forensics course compares logical and physical acquisition and explains the controls that support evidence integrity.
You’ll learn: • Planning an authorised acquisition • Chain-of-custody documentation • Logical versus physical extraction • Write protection and forensic imaging • Hash verification and secure storage • Preliminary artifact review • Recording tools, versions, time and operator actions
Procedures depend on the device, jurisdiction and investigation. Use approved tools and organisational or legal guidance.
Chapters: 0:00 Introduction to Data Acquisition 2:15 Maintaining the Chain of Custody 5:30 Physical vs. Logical Data Extraction 9:45 Essential Forensic Imaging Tools 14:20 Analysing Digital Artifacts 18:00 Summary & Next Steps
NIST evidence preservation: https://nvlpubs.nist.gov/nistpubs/ir/2022/NIST.IR.8387.pdf
#ForensicAcquisition #DigitalForensics #ChainOfCustody