CFCE

IACIS Certified Forensic Computer Examiner (CFCE)

Data Recovery And ImagingEnglish
Exam overview

Practice session

When performing forensic acquisition of a hard drive using a tool like FTK Imager or dd, which image format stores the forensic image along with embedded metadata (case info, examiner, hash values, acquisition timestamps) in a single container?

Loading your practice session…