Hi,
I apologize if this question has been already been answered but my search of the forum didn't turn anything up. I'm interested in using OSFClone to create a forensic image that can stand up to a court challenge.
If I boot a subject computer with OSFClone, what artifacts, if any, will doing so leave on the subject computer drive?
Thank you,
Mark
I apologize if this question has been already been answered but my search of the forum didn't turn anything up. I'm interested in using OSFClone to create a forensic image that can stand up to a court challenge.
If I boot a subject computer with OSFClone, what artifacts, if any, will doing so leave on the subject computer drive?
Thank you,
Mark
Comment