Course Description
This course is our first in a series introducing Evimetry for forensic data acquisitions. We start with the Evimetry Windows Controller interface and perform a basic full linear (bit-for-bit) acquisition directly from the Controller.
Learning Objectives
By the end of this course, students should be able to: Understand the basic layout of the Evimetry Windows Controller Differentiate Evidence drives vs. “Blessed” drives Understand how to perform a full linear, forensic acquisition with Evimetry Recognize the different options for performing allocated only, allocated and remainder, non-linear partial or live disk access.