Processes
Lab workflow
- Label computer media with Source ID
- Digitally photograph computer media
- Forensic or Logical Capture of computer media using FTK imager (can involve using as many as 3 different workstations depending upon format)
- Processing uisng Forensic Toolkit
- Log media recovery statistics