In order to make a forensically sound copy of a hard disk for analysis, it is critical that you employ a write-blocker. What does this device do that makes for a sound copy?
a. It performs bit by bit error correction of each sector of the source hard disk as it is copied to the target medium.
b. It prevents rootkits from destroying the data when it detects the lauch of a copy routine.
c. It prevents the OS from making any changes to the metadata of files as they are being copied.
d. It is capable of reading the system files that are generally invisible to the host operating system of the target device.
c. It prevents the OS from making any changes to the metadata of files as they are being copied.
You might also like to view...
The ________ on a chart identifies the colors or patterns used in data series
Fill in the blank(s) with the appropriate word(s).
A ____ is a symbol, traditionally a closed circle, that sets off items in a list.
A. video clip B. photograph C. bullet character D. text character