Now that you've completed the necessary acquisition and imaging tasks, you're ready to compile all your reports and lab notes into a single forensic imaging lab report that you will submit to your supervisor. Your supervisor reminds you that your report may be presented in a court case, so it needs to meet legal requirements. The report should include the following sections:
One- to two-page memo addressing the types, sources, collection of digital information, as well as file formats
Imaging of a USB drive using Linux tools (lab notes, report)
Imaging of a USB drive using Windows tools (lab notes, report)
One- to two-page memo responding to questions about imaging procedures
RAM and swap acquisition—live, local computer (lab notes, report)
Forensic imaging over a network (lab notes, report)
Sample Solution