You do not do any writes in a forensics scenario. Especially if you want to make... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

marysol5 25 days ago | parent | context | favorite | on: My USB Drive Has a Hidden Encrypted Vault

You do not do any writes in a forensics scenario. Especially if you want to make it stand in court.

You have to always keep a clean hashed copy, and then work on copies from there.

phyzome 24 days ago [–]

You can't make a "clean hashed copy" of hardware.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact