The type of cases you deal with today likely involve a number of
different types of devices.
Magnet ACQUIRE's ability to collect evidence from a hard drive quickly and efficiently means you spend less time acquiring and more time examining.
Cut Through The Noise With
With the option to run a targeted acquisition, you get the areas of the hard drive most commonly known for containing important evidence. This means you can eliminate unnecessary files that won't really support your case from the beginning of your investigation.
Combined PC and
In addition to the acquisition of smartphones and tablets, Magnet ACQUIRE also has the ability to image laptops, desktop computers, and removable media like USB keys using two different methods of acquisition.
MAGNET ACQUIRE OFFERS A CHOICE OF
THREE EXTRACTION PROCESSES
A targeted acquisition is a logical image that contains important files for forensic analysis. During this type of image acquisition, Magnet ACQUIRE copies files such as system files, user profiles, and more into a single, compressed file. This option represents a logical image that contains important files for forensic analysis.
Entire Contents of the Drive
A full acquisition is a bit-for-bit copy of the entire hard drive, USB, etc, and it contains the entire contents of the drive, including unallocated and deleted space. This is different from a quick acquisition, which only copies the contents from select locations on the disk. This option represents a physical image of the drive.
All Files and Folders
During this type of acquisition, Magnet ACQUIRE copies all logical files and folders into a single, compressed file. This does not include deleted files and/or content. This option represents a logical image of all the files and folders.
Magnet ACQUIRE can obtain a full, quick and targeted images from HDDs, SSDs,
USB and SD flash drives, and other external drives. Windows, Mac OS, and Linux are
all supported. It is also compatible with most write-blockers.
Linux, OS X
Linux, OS X