Creating an image

For checking if the disk attached has been recognised by the OS, I run: fdisk -l:

It is possible to see the disk attached under the name /dev/sdb. By running ls -lha I can see all the partitions the same HDD has:

Then I executed the read only permissions to the disk, so there is no possibilities of causing some damage to the evidence:

Then executed the command dcfldd:

The results are: