TABLE OF CONTENTS The features and advantages of hardware computer forensic tools are based on techniques that substitute software for processes and the use of equipment that is compact and easy to operate.
These devices are often powered from the source or from the suspect machine. However, the forensic analyst who relies on forensic hardware must ensure that all possible connectors are available prior to starting a job. Some of the advantages include:
The mbedded development that has been completed, saving space and time and generally simplifying the acquisition process.
The greater portability of the products.
The increeased speed of acquiring of digital data using hardware devices compared to using software.
Hardware protection devices offer a simple method to acquire an image of a suspect drive with much less fiddling with the configuration settings in software. This makes the process simpler and less prone to error.
The following section introduces a number of these hardware-based forensic tools.
NoWrite prevents data from being written to the hard disk. It supports hard disk drives with high capacities. It is compatible with all kinds of devices including USB or FireWire boxes, adapters, and IDE interface cables. It supports communication between common IDE interfaces.
NoWrite is only functional on native IDE devices. It supports all USB features such as plug- and-play. It is compatible with most operating systems and drive formats. NoWrite is transparent to the operating system and the application programs ...
