| <<< methods to acquire magnetic media | Index | methods to acquire magnetic media, cont. >>> |
Acquiring data when the system is not running:
Advantage -- safest method -- the examiner --
does not have to worry about any destructive processes running on the computer;
has no worries about corrupting the files or the media if the shutdown process is performed improperly;
has no concerns about data corruption when pulling the plug;
has no risk from software logic bombs potentially placed by the suspect.
| <<< methods to acquire magnetic media | Index | methods to acquire magnetic media, cont. >>> |