How To Create A Full Forensic Image With Nuix Enterprise Collection Center

Nuix Enterprise Collection Center empowers ediscovery, digital forensics, and cybersecurity practitioners alike.

Investigators are able to make a full forensic image, automated through the use of a simple collection wizard.

After providing a case name, investigators are then able to select the applicable time zone settings, as well as scheduling of the collection.

After selecting ‘Disk image’ for the type, and providing a label name, investigators then are able to choose whether to make a logical volume or physical disk collection, as well as where to store the collected data, the format for the collection – whether it be a raw .dd image or an EnCase evidence file – the file segment size, level of compression, as well as level of hashing.

Computers can be added, associated with a custodian or independently.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Upon completion, all of this information is then stored within a job XML file for easy later use or sharing with a fellow investigator.

Find out more about Nuix Evidence Collection Center.

Leave a Comment

Latest Videos

Podcast Ep. 85 Recap: AI-Powered License Plate Reading With Amped DeepPlate #dfir #digitalforensics

Forensic Focus 23 hours ago

Digital Forensics News Round-Up, May 15 2024 #dfir #computerforensics

Forensic Focus 15th May 2024 4:55 pm

Digital Forensics News Round-Up, May 15 2024 #dfir #computerforensics

Forensic Focus 15th May 2024 3:58 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles