
Forensic Imager should be run as local Administrator to ensure that sufficient access rights are available for access to devices.
Forensic Imager uses EnCase v6 E01 format. Images independently verified with EnCase should be done using V6 or above.
Forensic Imager does NOT support DOS acquisition. If acquisition from a DOS boot disk is required alternative forensic acquisition software should be used.
Forensic Imager does not currently support the acquisition of HPA or DCO areas. The HPA and DOC are two areas of a hard drive that are not normally visible to an operating system or an end user. Whilst the HPA and DCO are hidden, it is technically possible for a user to access these areas and store/hide data.
Forensic Imager uses EnCase v6 E01 format. Images independently verified with EnCase should be done using V6 or above.
Forensic Imager does NOT support DOS acquisition. If acquisition from a DOS boot disk is required alternative forensic acquisition software should be used.
Forensic Imager does not currently support the acquisition of HPA or DCO areas. The HPA and DOC are two areas of a hard drive that are not normally visible to an operating system or an end user. Whilst the HPA and DCO are hidden, it is technically possible for a user to access these areas and store/hide data.


















#ref-menu
#ref-menu
