April 13, 2024, 5:15 p.m. | /u/anterous_sto

Computer Forensics www.reddit.com

Hi all, with TPM the old and trusted method of pulling the hard drive and cold imaging can’t occur anymore. What boot CDs / USBs are people using to ensure no changes occur and allow the correct imaging process? All Linux based (sift / kali etc) or has anyone found a (safe) windows based approach? Thanks

boot can capture cold computerforensics drive etc found hard hard drive imaging kali linux old people process safe sift thanks tpm windows

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Threat Analysis Engineer

@ Gen | IND - Tamil Nadu, Chennai

Head of Security

@ Hippocratic AI | Palo Alto

IT Security Vulnerability Management Specialist (15.10)

@ OCT Consulting, LLC | Washington, District of Columbia, United States

Security Engineer - Netskope/Proofpoint

@ Sainsbury's | Coventry, West Midlands, United Kingdom

Journeyman Cybersecurity Analyst

@ ISYS Technologies | Kirtland AFB, NM, United States