Any good links or advise on imaging these devices in a forensically sound manner. I cant see how either could be protected by fastbloc le or fe?
For USB drives you may wish to try
For CD/DVD, I would think a read-only drive would well to ensure nothing is written the the subject disk.
Hi
With cds and dvds (read only memory) the easiest method is to use EnCase to image them and / or isobuster to preview them. If they are re writable, you would still require burning software to change anything on the media so by placing the cd / dvd in the drive it is still regarded as being forensically sound.
I have always used the
A read only CD/DVD drive is absolutely necessary on any XP, Vista or Mac forensic station as those OSes have CD burning software built-in.