Feb. 9, 2023, 11:27 a.m. | /u/arkenoi

Computer Forensics www.reddit.com

What would be your tool of choice if you want to get the most accurate disk image suitable for analysis on a different computer (encryption stripped)? Imagine you do not have any commercial tools at hand, so you need to justify any new purchase. It would be perfect if the tool could preserve as many low-level filesystem artifacts as possible (otherwise I could just dmg/tar/rsync it, right?). aff4 would be a plus, but not a requirement.

analysis commercial computer computerforensics disk encryption filesystem low mac perfect rsync tar tool tools

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Open-Source Intelligence (OSINT) Policy Analyst (TS/SCI)

@ WWC Global | Reston, Virginia, United States

Security Architect (DevSecOps)

@ EUROPEAN DYNAMICS | Brussels, Brussels, Belgium

Infrastructure Security Architect

@ Ørsted | Kuala Lumpur, MY

Contract Penetration Tester

@ Evolve Security | United States - Remote

Senior Penetration Tester

@ DigitalOcean | Canada