Forensic computer analysis is normally performed without modifying any files on the original hard drive by first taking an exact copy of the entire drive. Copying a hard drive in this manner does not modify the files in any way. No excuse should be accepted as to why 690 files were changed...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.