Intel Computer Stick forensic imaging (1)
The Intel Computer Stick, has 32Gb of storage internally (NB: storage is a couple of Gb larger, 32Gb is the size of the active partition on which the OS is loaded), and 2Gb of memory. It also has a full size USB port, and a microUSB for power. Finally it has a microSD port, and of course an HDMI plug. Connectivity via wifi and bluetooth. Video output via its HDMI plug.
So how can we get a forensic image? Not easy to do directly as there is no easy way to extract the storage device (could do it with chip off I suppose). I opted for a boot into Ubuntu and an imaging to an external device using dd. Not perfect (and I did not even use a 'forensic' linux) but a process that does not require much equipment and does a reasonable job with little chance of the original evidence being changed.
These sticks come with a version of Windows10 (which is somewhat less annoying than Windows8), and can work well as media platforms. You can also upgrade them to Linux quite easily.
Intel Computer Stick forensic imaging (1)
The Intel Computer Stick, has 32Gb of storage internally (NB: storage is a couple of Gb larger, 32Gb is the size of the active partition on which the OS is loaded), and 2Gb of memory. It also has a full size USB port, and a microUSB for power. Finally it has a microSD port, and of course an HDMI plug. Connectivity via wifi and bluetooth. Video output via its HDMI plug.
So how can we get a forensic image? Not easy to do directly as there is no easy way to extract the storage device (could do it with chip off I suppose). I opted for a boot into Ubuntu and an imaging to an external device using dd. Not perfect (and I did not even use a 'forensic' linux) but a process that does not require much equipment and does a reasonable job with little chance of the original evidence being changed.
These sticks come with a version of Windows10 (which is somewhat less annoying than Windows8), and can work well as media platforms. You can also upgrade them to Linux quite easily.