June 10, 2023, 5:07 p.m. | /u/Quality_Qontrol

Computer Forensics www.reddit.com

I'm trying to image some evidence for work. An admin shipped out a total of three drives to me. Two of the drives, when plugged into the write-blocker on my forensic tower, do not show up as a physical device in FTK Imager or EnCase. I can't even see any reference to them in Disk Management or Device Manager. The third drive, can be seen and was imaged. But a closer look at it shows that there's no MBR or …

blocker computerforensics device devices drives forensic local physical work

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Security Compliance Strategist

@ Grab | Petaling Jaya, Malaysia

Cloud Security Architect, Lead

@ Booz Allen Hamilton | USA, VA, McLean (1500 Tysons McLean Dr)