Title: 3.Contingency Planning for Image Acquisitions
Course: IN 2005 Digital Forensics > Section: Module 4: Chapter 4 - Data Acquisition

Contingency Planning for Image Acquisitions

1. Considerations to take to prevent copies of the evidence from damaging or losing.
  - Duplicate your evidence copies
  - Acquire more than one image of the evidence using different tools or techniques
  - Consider host protected areas
  - Be prepared to deal with encrypted drives