
Double-click the ProDiscover Basic desktop icon, click Tools on the menu, point to Image Conversion Tools, and then click Convert ProDiscover Image to ∽D.ī. dd Image that can be viewed by any tool (e.g.,FTK imager).Ī. Take a snap shot to submit a lab 1 report.Ĥ. Then you should confirm that the LabProj1.eve image has been created.
%PARENTKEY PRODISCOVER BASIC DRIVER
In the Capture Image Dialog box, click the Source Drive list arrow, and then click the driver letter for the USB drive.Click Action, Capture Image from the menu. Double-click the ProDiscover Basic desktop icon.Create a folder called IASP-530 Labs in your C drive.Insert the USB drive containing evidence into your computer.eve image to search for existing or deleted files. You simulate seizing the digital evidence (downloading inclass-Lab files) on the USB drive Using ProDiscover Basic to image and build a ProDiscover Basic. In the Number of Passes list box, type 2, and then click Start to begin the process.ģ. Otherwise, you delete all your critical data.ĭ. In the Secure Wipe Disk box, click the Disk to Wipe list arrow, and click the right drive of the USB drive (not C or D main drive).

In the Launch Dialog box, Click Tools, Secure Wipe from the ProDiscover menu.Ĭ. Right-click the ProDiscover Basic desktop icon to openī. You wipe securely your USB drive before using it for our inclass-Lab and it can be also used wipe securely as anti-forensics.Ī.

%PARENTKEY PRODISCOVER BASIC INSTALL
