PRACTICAL 7 WITH OSF
Create forensic images of digital devices from volatile data such as
memory using Imager for:
(i) Computer System
(ii) Server
(iii) Mobile Device
Step 1: Start OSForenscis as Start->All Programs -> OSForensics->OSForensics
Step 2: Create a new Case by selecting Create Case. The following window will
be popped:
Enter Appropriate Details and Select OK
Step 3: Select Drive Imaging under Housekeeping
Step 4: Select the appropriate disk for which the Image has to be procured under
Source Disk. Select the Target Image Location and Click Create Image
Step 5: The Drive Image (.img file) will be created at the target location.
The same process should be repeated for Mobile as follows:
Attach the mobile device and select the appropriate mobile drive as the Source
Disk.
The same process should be repeated for Server as follows:
Attach the mobile device and select the appropriate mobile drive as the Source
Disk.