Revision as of 10:25, 27 August 2010 edit ErrantX (talk \| contribs) Administrators 21,974 edits mare images ← Previous edit		Revision as of 10:27, 27 August 2010 edit undo ErrantX (talk \| contribs) Administrators 21,974 edits →References: remove detail placed after categories Next edit →
Line 38: [[it:Write blocker]] one easier of doing forensics is having a bootable usb dongle (probably with some flavor of linux) and then mount the harddisk as readonly of the suspected machine, and do the necessary forensics, this method is quite common nowadays.

Forensic disk controller: Difference between revisions