Digital Forensic Collection of Data from a Specific Device

1
Forensic Analysis
Student’s Name:
Institution Affiliation:

2
Plan of a digital forensic collection of data from a specific device
Step 1: Distinguishing proof is a critical initial phase in the scientific assessment process. It
legitimately impacts endeavors to build up a strategy and, eventually, the achievement of the
venture. It additionally enables the client to control costs.
Step 2: Before any computerized measurable assessment starts, the extent of activities must be
recognized. Who are the key players and overseers? What are the best wellsprings of potential
electronic proof that should be gotten to for gathering?
Step 3: Leading meetings is a significant early advance in a fruitful computerized scientific
assessment. When deciding important gadgets from which to gather information for a case
Step 4: Take a gander at the scope of factors and figure out what variables are affecting
everything for the situation.
Step 5: Archive what you have gathered.
Step 6: On the off chance that it is resolved that extra electronic proof (excluded in the first
arrangement) should be assembled, it's critical to decide whether there is a requirement for a
legitimate warrant, corrected assent structure, or some other changes to the first extent of work.

3
Computerized proof should be altogether evaluated concerning the extent of the case. The extent
of a criminological assessment ca exclude "everything." At least, not except if there is boundless
time and spending plan included.
Forensic acquisition of the SD card
Experiment procedure
In carrying out our experiment, we used a 256 MB SD card, which has photos, word, pdf,
and other file formats. Our system for testing the SD card is running a Windows
operating system. We first formatted our SD card using our Windows machine(Kebande,
and Ray, 2016).
Tools used
Forensic Tool Kit (FTK) Imager software
It is an information preview and imaging device used to obtain information (proof) in a
forensically stable way by making duplicates of information without making changes to
the first proof. Here is our FTK tool(Shrivastava, 2017).
Click on the source for our case is SD card

4
Selecting drive and click finish