Acorn application guide
Forensic Imager
A forensic disk imaging job needs a clear source, a separate destination and a verification plan. The populated Imager interface brings those choices together before capture. Agree what will be checked afterwards, rather than treating a completed progress indicator as sufficient evidence of success.
Acquisition setup shown
How should this source be acquired without confusing it with the destination?
Start with
- A source device or image and an appropriate destination selected in the acquisition interface.
What you can take away
- The illustrated inventory and acquisition setup; no completed acquisition is claimed from this screen.
View full screenOpen the screenshot and choose “View actual size” to read the records at their original resolution.
A practical starting point
How the workflow fits together.
Identify the correct source and destination, and record the protection method. Check the available space and the intended acquisition scope.
Review the options for the chosen route against the source and expected output. Use representative test media before adopting that route for case work.
For a completed test, retain the acquisition record and independently check the intended output. Record errors and unreadable areas instead of assuming completion means complete coverage.
Evaluate the workflow
Questions worth bringing to a demonstration.
- Which acquisition route has been tested for my source and intended output, in the build and edition being evaluated?
- What records and verification values are available after that route completes, and how are read errors or incomplete coverage shown?
- Can the result be checked independently without changing the preserved source?
Useful next steps
Start with your requirements
Bring a sample question.
Ask us to demonstrate this workflow with suitable public or constructed material. Do not send confidential evidence in an initial enquiry.
Planned for Q1 2027
Be first to hear. Save 10% at launch.
Request Acorn launch news and details of the planned 10% offer. No deposit or purchase commitment.
Launch-update requests go to the SQFR team for review. Final offer terms and product availability are still to be confirmed.
About the screenshots and illustrations
Application screens are selected from the September 2026 Acorn screenshot pack. Captions distinguish native setup views, constructed training records and public-corpus results. They are not private client cases, and a displayed control does not establish that every operation was completed.
Relevant public sources include DeepBlueCLI training event logs and Plaso test data. Check the relevant source terms before redistributing an underlying dataset.
Workspace scenes and sector mascot variants are generated illustrations. They do not show actual police, judicial, military or university deployments or endorsements. The original Squirrel Forensics identity is retained.