Introduction

• The forensic workstation must have a consistent directory structure to store images and associated files.
  
  
• Digital storage devices often require physical preparation before they can be imaged. Hard drives may need to be removed from laptop or desktop computers before forensic imaging.

Create directory structure in DATA (D:\) drive

1. Coming soon.

Remove hard drives

• Remove internal hard drive from Lenovo ThinkCentreM58 desktop computer