This preview has intentionally blurred sections. Sign up to view the full version.View Full Document
Unformatted text preview: of Symantec's Ghost) which incorporates a large number of hardware device drivers into the Sysprep routine. Question #15 Page #142 I could not find much to answer this question. I am personally not familiar with Linux so I don’t have any experience I can write about for this answer. The Linux OS has many features that are applicable to computer forensics, especially data acquisitions. One unique feature is that Linux can access a drive that isn’t mounted. Physical access for the purpose of reading data can be done on a connected media device, such as a disk drive, USB drive, or other storage device. In Windows and newer Linux kernels, when you connect a drive via USB, FireWire, external SATA, or even internal PATA or SATA controllers, both OS’s automatically mount and access the drive....
View Full Document
This note was uploaded on 04/17/2011 for the course COMPUTER S 101 taught by Professor Xxx during the Spring '11 term at Holy Family University.
- Spring '11