In the laboratory, obtaining data from a computer is generally accomplished by removing the hard disk drive from the system and creating a forensic image of the hard disk drive. In doing so the examiner needs to be able to prove: A$.$ Changes were made to the hard disk drive A$.$ Changes were made to the hard disk drive B$.$ A Drive Down occurred B$.$ A Drive Down occurred C$.$ A Swoop and Squat occurred C$.$ A Swoop and Squat occurred D$.$ The forensic image obtained includes every bit of data and caused no changes to the hard disk drive D$.$ The forensic image obtained includes every bit of data and caused no changes to the hard disk drive E$.$ A validated algorithm was written over E$.$ A validated algorithm was written over Clear my choice Question $69$ Not yet answered Points out of $1\mathrm{.}00$