Follow this standard operating procedure to safely image a storage drive using FTK Imager 3.4.0.1. Step 1: Establish Write-Protection
To ensure the authenticity and integrity of an acquired image, FTK Imager automatically calculates for the entire drive or image. It also supports SHA-256 hashing, providing a way to generate unique digital fingerprints for the evidence. By comparing the hash value of the original drive with that of the newly created image, an investigator can cryptographically prove that the data is identical and unaltered. ftk imager 3.4.0.1