 |
 |
 |
Hard drives forensic examiners tackle may be as little as 20
gigabytes, or some newer drives are 250 gigabytes, even up to
750 gigabytes.
|
 |
 |
 |
 |
Computer forensic examiners, using special computer forensic
software, first acquire an image of the target media, then do an
analysis.
|
 |
 |
 |
A lot of the evidence you seek will not be visible to the untrained eye. You won’t find it in a Word document by using Windows Explorer, or by starting a program from a shortcut on the desktop.
|
 |
|
 |
 |
 |
|
|
|
