Research 101: How to do research in digital forensics

Digital forensic science includes many areas of study. Gaining a background in every relevant area is difficult, if not impossible. However, all knowledge in the field needs to start with asking a question. Many students I’ve worked with, however, are even unsure about how to start asking questions.

1 min read

Testing File Systems for Digital Forensic Imaging

Introduction - the problem

Recently I’ve been doing a lot of large disk forensic imaging. I usually use Linux-based systems for forensic imaging. A normal case would be physical imaging of a source to an ext4 formatted destination. I would normally get about 120MB/s imaging speed, depending on the source disk.

2 min read