Best practice approach to live forensic acquisition

All of Your Data are Belong To Us: The Art of Imaging and Analysis - VDA Labs

All of Your Data are Belong To Us: The Art of Imaging and Analysis VDA labs is brought into many different types of situation where a client may want imaging and analysis. From diagnosing patient zero during a malware outbreaks to employee espionage taking system images and doing analysis is a important part of the [...]

vdalabs.com

Comparing tools

Imager Comparison Testing

Stats Product,Firmware/version,Cost in USD,Image format,Image options,Source drive,Destination drive,Destination filesystem,Workstation,Writeblocker,Notes,Image size (bytes),Image size (MB),Image size (GB),% smaller,Hours,Minutes,Seconds,Total seconds,Total minutes X-Ways imager,17.3,$197.58,DD,...

docs.google.com

Mobile devices

Mobile Incident Response for Android and iOS | NowSecure

Edit This Page It's helpful to characterize mobile incident response (IR) tools into four broad categories: Continual Analysis Device Acquisition Analysis In this section, we will describe these categories of tools and provide more detailed examples.

books.nowsecure.com

Tablets