A Low-cost Disk Imaging Device Using Raspberry Pi 4 for Digital Forensics

As with crimes that occur in the real world, cybercrime cases require investigation to gather evidence for court proceedings. Digital forensics is a great way to investigate evidence from cybercrime. Investigating a cybercrime to find digital evidence cannot be done inappropriately. Mishandling of evidence can make it invalid. It is necessary to copy the evidence before, so the investigation process is not done directly on the original digital evidence. Intended to avoid or at least minimize damage to evidence. In conducting an investigation, an investigator needs tools and supporting devices that have high accuracy, reliable, and affordable. However, most of the devices on the market are available at quite expensive prices. Therefore, in this study, performed design and construction of a low-cost disk imaging device were carried out using the Raspberry Pi 4 and implemented using Python languages to copy evidence in the digital forensics process. Testing results and analysis of the proposed device show a good performance in terms of speed and accuracy of copies.