New answers tagged

1

OK, first things first: if you're trying to make a forensic image of a disk, and you're doing ANYTHING AT ALL that involves booting the machine it's in before you initiate the image, stop and ask yourself why you aren't just removing the disk and cloning it using dedicated hardware. Or at least disabling auto-mount and attaching the disk as removable storage ...


0

The "docking station" you're describing seems to primarily be a cloner, a tool that duplicates the data on one device to another. It shouldn't write anything to the "Source" disk by itself, though for forensic purposes you might want one that explicitly and legally-enforcibly guarantees not to write to the source. Conventionally, ...


Top 50 recent answers are included