Question

When would a remote acquisition be preferred? What tool would you recommend, and why?

Be certain to cite your sources using APA style,

Answer 1

Remote acquisition: Collecting information or data about an incident, system or process remotely. Remote acquisition provides incident analysis and would help process from a remote location in digital format.

Remote acquisition is preferred in the event when you want to provide isolation to the system being under inspection but still want to analyse the system. E.g. forensic investigators use this by remotely gathering digital evidence.

For remote acquisition foresic invetigator's recommended tool is RAFT (Remote Acquisition Forensic Tool). It is a client-server architecture based tool used to provide remote access to incident analysis data.  This is achieved through the implementation of a secure, verifiable client/server imaging architecture. It is very user friendly and require minimal technical knowledge.