When imaging physical media, always connect the target drive through a hardware write-blocker. This prevents the host operating system from writing metadata (like access times) to the evidence drive.
Are you planning to use FTK Imager for or for imaging a physical drive through a write blocker? ftk imager 4.7.1 download
To run FTK Imager 4.7.1 from a USB drive during live incident response triage: When imaging physical media, always connect the target
Select whether your source is a Physical Drive (the entire hardware disk), a Logical Drive (a specific partition like C:), or an Image File . Click Next . To run FTK Imager 4
For professionals and students alike, obtaining the software is a straightforward but formal process. It is available as a free download official Exterro website FTK IMAGER IN DIGITAL FORENSIC 20 Sept 2023 —