Explore live forensic acquisition techniques in this 52-minute conference talk from BSides Tampa 2015. Delve into the importance of live acquisition, various methods, and potential pitfalls. Learn about disc forensics, targeted searches, and automation in digital investigations. Discover when to use live acquisition, what data to collect, and how to leverage DNS cache information. Gain insights into the challenges and future developments in this critical area of digital forensics.
Overview
Syllabus
Overview
What is Live Acquisition
Why is it important
Methods of acquisition
Disc forensics
When does it go wrong
What should we get
DNS Cache
Targeted Searches
Automation
Caveat
The Method
Whats Next
