April 13, 2024, 5:15 p.m. | /u/anterous_sto

Computer Forensics www.reddit.com

Hi all, with TPM the old and trusted method of pulling the hard drive and cold imaging can’t occur anymore. What boot CDs / USBs are people using to ensure no changes occur and allow the correct imaging process? All Linux based (sift / kali etc) or has anyone found a (safe) windows based approach? Thanks

boot can capture cold computerforensics drive etc found hard hard drive imaging kali linux old people process safe sift thanks tpm windows

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Security Operations Manager-West Coast

@ The Walt Disney Company | USA - CA - 2500 Broadway Street

Vulnerability Analyst - Remote (WFH)

@ Cognitive Medical Systems | Phoenix, AZ, US | Oak Ridge, TN, US | Austin, TX, US | Oregon, US | Austin, TX, US

Senior Mainframe Security Administrator

@ Danske Bank | Copenhagen V, Denmark