Problem
Evidence collection is one of the most important parts of an investigation. Research the various tools used to make a forensic image of a drive. Find at least one free and one paid tool. Write a formal report comparing the paid and free tools.
a) How are they the same?
b) How are they different?
c) How do they validate the data collected?
d) How would you verify if the tool is reliable enough that its output could be introduced as evidence in court or an administrative proceeding?