+ Explain what tools the forensics team uses for each platform. If the team uses one tool for more than one operating system (OS), explain that. At a minimum, include a discussion on tools for the following:

UNIX-like systems

Windows systems

+ Identify any special add-on features to tools that may be necessary (e.g., write-blockers).

+ Explain how the team uses these tools in your organization (e.g., designated laptops, specialized lab setups, etc.).

+ Explain why the team uses the tool with this specific configuration.