| <<< methods to acquire magnetic media, cont. | Index | methods to acquire magnetic media, cont. >>> |
Acquiring data after performing a normal shutdown:
probably the preferable way to shut the system down;
i.e., use the operating system to normally shut all processes and files to minimize problems with other forms of shutdown.
This approach can only be taken if the investigators are assured that there are no destructive processes running and no logic bombs embedded within the shutdown process.
Again, access to encrypted data may be lost forever after shutting the computer down.
| <<< methods to acquire magnetic media, cont. | Index | methods to acquire magnetic media, cont. >>> |