Creating a Forensic Image using FTK Imager/Encase Imager.

Cyber Forensics -: I am using Access Data FTK Imager Software. 1. Creating Image Step 1 -: Click on Create Disk Image. Step 2 -: Select Contents of a folder, Click on Browse, Choose the Image Source Folder, Click on Finish. Step 3 -: Click on Add, Enter the Evidence Item Info, Click on Browse, Choose the Destination, Enter the Image Filename as Image, Click on finish Step 4 -: Click on start, It will create Image. 2. Checking the Integrity After the images are successfully created, click Image Summary to view detailed file information, including MD5 and SHA1 checksums. Step 5 -: Click on Add Evidence Item, Select the Image File. Step 6 -: Click on Browse, Select the AD1 File Located on the Destination Folder and click on Open. After that Click on Finish 3. Analyzing the File Step 7 -: On the Evidence Tree Click on Image ad1, Then click on Recovery destination. The Image file will be shown. Step 8 -: Click on File, Add Evidence Item, Select Contents of a Folder, Browse for the Destination Folder.