Hey everyone! I just started a job where I'm responsible for managing laptop returns. My current process involves copying user data and formatting the drives, but coming from a legal background, I realize this poses serious issues for maintaining the chain of custody and ensuring evidence integrity. If these devices ever go to court, a simple file copy wouldn't hold up.
I've been instructed to start creating full forensic images for about 1-2 laptops monthly, especially for high-risk cases. I understand that using a write blocker is crucial to keep the source drive untouched.
I've looked into Tableau write blockers, but they're quite pricey at over €650. My manager is looking for more affordable options since we only handle a few devices each month.
Here are my main questions for the community:
1. Is using a hardware write blocker mandatory for this small volume? Are there trustworthy software alternatives for Linux/Mac that can serve a similar purpose in legal situations?
2. Can anyone recommend budget-friendly hardware that's reliable for imaging? I've seen some cheaper USB-C or SATA bridges, but I'm concerned about their effectiveness in a forensic context.
3. What's your preferred budget-friendly setup for imaging, like specific software and hardware combinations?
I want to ensure I'm doing this properly without overspending, but I also need to demonstrate to my boss that cutting corners could jeopardize admissibility in court. Thanks for any insights you can provide!
3 Answers
It sounds like your situation is serious if there’s potential for court cases tied to the laptop returns. If that's the case, it might be better to keep the laptops intact for proper legal procedures. But I understand not wanting to tie up devices unnecessarily, especially with only 1-2 needing imaging each month. Just make sure to do the imaging properly to avoid any legal issues later on!
If you're looking for alternatives to Tableau, Wiebetech might have a more budget-friendly option. Just be sure to keep the firmware updated since that’s something many forget to do. Tableau is great, but if cost is your main concern, exploring other brands is wise!
For just 1-2 laptops a month, you could find a used Tableau T35u on eBay for around €150-200. It's still solid for court use. Just pair it with software like FTK Imager, and keep a good record of hash values to maintain your chain of custody. The write blocker is definitely not the area to skimp on; that's where defense attorneys will focus their scrutiny.
Related Questions
Interactive CPU Architecture Simulator
7 segment display encoder
LCD Character Display Simulator
Ohms Law Calculator
WS2812 Pattern Editor
Uart Baud Rate Calculator