CAINE - 02 - forensic imaging and cloning using Guymager - tutorial
CAINE - 02 - forensic imaging and cloning using Guymager - tutorial
♥️ SUBSCRIBE for more videos: https://www.youtube.com/BlueMonkey4n6...
For the next video in the series (03 - Autopsy basics tutorial): • CAINE - 03 - Autopsy basics tutorial
For the previous video in the series (01 - Forensically prepared media): • CAINE - 01 - tutorial on how to create for...
This course was designed to provide information on how to use the tools on the CAINE forensics distro to accomplish tasks in the basic steps in digital forensics: Preservation of evidence (write blocking), extraction of data (imaging), Analysis, and Reporting. This course covers the tools that allow users to acquire data (logical and physical), forensically analyze data, hashing datasets, perform malware analysis, memory forensics, mobile forensics, network forensics, open source intelligence (OSINT), and timeline analysis.
This video will present detail walkthrough of the Guymager included in the CAINE distro. We will cover steps to create a forensic image in Expert Witness Format (EWF), to create a forensic images in the raw/dd format, and disk cloning using Guymager.
Video timeline
00:00 intro
00:49 mounting destination/staging drive
01:24 Guymager launch and menu items
04:28 Acquire EWF Image
08:09 Acquire Raw Image
09:27 BONUS: Cloning an evidence drive
10:39 recap
Linux distro:
CAINE linux (http://www.caine-live.net)
Virtualization software:
Virtual Box (http://virtualbox.org)
Icons made by freepik from @flaticon http://www.flaticon.com/authors/freepik
#dfir #linux #guymager