Revision as of 23:29, 10 May 2009 edit Reswobslc (talk \| contribs) 3,364 edits m →How it works: clarify typical usage scenario ← Previous edit		Revision as of 03:36, 19 April 2010 edit undo 203.34.117.5 (talk) →References Next edit →
Line 34: [[it:Write blocker]] one easier of doing forensics is having a bootable usb dongle (probably with some flavor of linux) and then mount the harddisk as readonly of the suspected machine, and do the necessary forensics, this method is quite common nowadays.

Forensic disk controller: Difference between revisions