Ftk-imager

Download

• wget https://ad-zip.s3.amazonaws.com/ftkimager.3.1.1_ubuntu64.tar.gz

Install

• tar -C /usr/local/sbin -xvzf ftkimager.3.1.1_ubuntu64.tar.gz

Image erstellen

• ftkimager /dev/sdb /share --case-number 01 --evidence-number 01 --description secure.local.forensic --examiner tw,ng --notes first-run

Quelle

• https://it-dad.de/2019/03/13/ftk-imager-und-autopsy-unter-linux-nutzen/