Week 2 computer forensics

Week 2

Computer Forensics Evidence Rules

Research 5 current acquisition tools.  Prepare a short report on each that includes the computer forensics vendor name, acquisition tool name and latest version number, and a discussion of features of the product.  The features should be discussed, not simply listed in bullet form.  Features to discuss should include, but not be limited to

• Raw format
• Proprietary format
• AFF format
• Other proprietary formats the tool can read
• Compression of image files
• Remote network acquisition capabilities
• Method used to validate (MD5, SHA-1, etc.)

Finally, write a short paragraph discussing which tool you would prefer to use and why.

Be sure to list all sources used in your research.