Hot answers tagged hardware
in all practicality, producing the photograph of the acquisition hash and showing the new and old hashes match will satisfy almost everyone that the drive hasn't been tampered with. However... The most accurate answer is that, depending on what hash algorithms the investigators used, they may not be able to prove the data was unchanged. If the hash ...
Only top voted, non community-wiki answers of a minimum length are eligible