Data acquisition methods for digital forensics

MN624
Name of the student
Name of the University
Author’s note

Running head: MN624
Table of Contents
Digital Clues:.............................................................................................................. 3
Prodiscover forensics tool:.......................................................................................... 3
Data acquisition in digital forensics:...........................................................................8
Data preservation methods:....................................................................................... 9
Data acquisition methods for digital forensics:..........................................................9
References:.............................................................................................................. 11

Running head: MN624
Digital Clues:
The digital forensics is referred to as the procedure of preserving, recognizing,
obtaining and documentation of computer evidence that can be utilized by the court
of law. It is a science of discovering evidences from the media those are digital such
as mobile phone, computer, server and many more. It offers the team of forensic
with best tools and techniques in order to resolve complex cases related to digital
[1]. The digital forensics assists the team of forensic s to evaluate, inspect,
recognize and then preserve the digital evidence stored on different types of
electronic devices. The procedure of digital forensics consists of identification,
preservation, evaluation, documentation and preservation. There are various types
of digital forensics that consists of, disk forensics, network forensics, database
forensics, wireless forensics and many more. The main aim of digital forensics is to:
 It assists in order to recover, evaluate and then preserve the digital materials
in a manner such that it assists the agency of investigation
 It assists to postulate the motive that is behind the crime and recognize the
criminal
Prodiscover forensics tool:
The ProDiscover is a tool of computer security that enables the professionals
of law enforcement to discover all the data on the computer disk while safeguarding
the evidence and developing quality reports to be presented to the court of law. The
ProDiscover is a system of disk forensics that offers a host of functionalities in order
to capture and evaluate disks. The product supports a variety of Mac, Linux and
Windows files. The tools make sure that both capturing and evaluation procedures
are by applying methods those are forensically sound. The resulting reports meet

Running head: MN624
the quality requirements. The tool is integrated with search engine, sequence of
embedded viewers and methods of hash comparison. Forensic image creation:
Files in the drive:
excel file has been deleted:
Launching Prodiscover: