- Magnetic media
- Optical media
Magnetic media (3.5" floppy disks, Zip disks)
- TD3 Forensic Imager
- Physical write-protection
Tableau Forensic Imager
The Tableau Forensic Imager (TD3) is a modular forensic imaging system that has an intuitive, easy-to-use interface.
Some Comments on the TD3 disk-to-file outputs
Sample log file output from TD3 attached for our review. Some log entries of note are:
...
The "_diskimage.packed_log" file can be discarded (not preserved) in my opinion, as it serves machine storage and transfer operational tasks, not intended for human readable, and contains less information than "_diskimage.log".
Write-protecting 3.5" floppies
3.5" floppy disks have small sliding tabs at their lower right-hand corners that control their read-write status. In order to physically ensure that your floppy disks are read-only, check to see whether the tab is closed (i.e., you are unable to see through it) or open (you are able to see through it): if open, the disk is write-protected. The first disk pictured below is read-write, the second is read-only (write-protected).
Optical media (CD-ROMs)
- dd
For optical media, using the dd command is one of the simplest options for capturing a raw image.
...