June 10, 2023, 5:07 p.m. | /u/Quality_Qontrol

Computer Forensics www.reddit.com

I'm trying to image some evidence for work. An admin shipped out a total of three drives to me. Two of the drives, when plugged into the write-blocker on my forensic tower, do not show up as a physical device in FTK Imager or EnCase. I can't even see any reference to them in Disk Management or Device Manager. The third drive, can be seen and was imaged. But a closer look at it shows that there's no MBR or …

blocker computerforensics device devices drives forensic local physical work

Senior Security Specialist, Forsah Technical and Vocational Education and Training (Forsah TVET) (NEW)

@ IREX | Ramallah, West Bank, Palestinian National Authority

Consultant(e) Junior Cybersécurité

@ Sia Partners | Paris, France

Senior Network Security Engineer

@ NielsenIQ | Mexico City, Mexico

Senior Consultant, Payment Intelligence

@ Visa | Washington, DC, United States

Corporate Counsel, Compliance

@ Okta | San Francisco, CA; Bellevue, WA; Chicago, IL; New York City; Washington, DC; Austin, TX

Security Operations Engineer

@ Samsara | Remote - US