How To Create A Full Forensic Image With Nuix Enterprise Collection Center

Nuix Enterprise Collection Center empowers ediscovery, digital forensics, and cybersecurity practitioners alike.

Investigators are able to make a full forensic image, automated through the use of a simple collection wizard.

After providing a case name, investigators are then able to select the applicable time zone settings, as well as scheduling of the collection.

After selecting ‘Disk image’ for the type, and providing a label name, investigators then are able to choose whether to make a logical volume or physical disk collection, as well as where to store the collected data, the format for the collection – whether it be a raw .dd image or an EnCase evidence file – the file segment size, level of compression, as well as level of hashing.

Computers can be added, associated with a custodian or independently.


Get The Latest DFIR News!

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Upon completion, all of this information is then stored within a job XML file for easy later use or sharing with a fellow investigator.

Find out more about Nuix Evidence Collection Center.

Leave a Comment

Latest Videos

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...