| <<< methods to acquire magnetic media, cont. | Index | office computer examination >>> |
Live system imaging:
Important reason not to shut the system down -- e.g., whole disk encryption (WDE) is known to be in use.
A running system can be imaged while it is running. This is an important method that will certainly become more common in time, particularly as encryption becomes more common.
| <<< methods to acquire magnetic media, cont. | Index | office computer examination >>> |