Processes

Lab workflow

  • Label computer media with Source ID
  • Digitally photograph computer media
  • Forensic or Logical Capture of computer media using FTK imager (can involve using as many as 3 different workstations depending upon format)
  • Processing uisng Forensic Toolkit
  • Log media recovery statistics