Answered step by step
Verified Expert Solution
Question
1 Approved Answer
To investigate an incident, what is the best approach regarding disk forensics? a . Create an image of the system while it is not working
To investigate an incident, what is the best approach regarding disk forensics?
a Create an image of the system while it is not working
b Create an image of the system while it is still working
c Copy all the files and folders to an external drive with the commandline tools copy or robocopy
d Investigate on the live system, without creating a disk image
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started
Databases In Networked Information Systems Second International Workshop Dnis 2002 Aizu Japan December 18 2002 Proceeding Lncs 2544
Authors: Subash Bhalla
1st Edition
3540002642, 978-3540002642
