Virtual forensic computing is a method by which an investigator can boot a forensic image of a suspects computer and operate it in a virtual environment. A virtual machine can be created from a forensic image, a write blocked physical disk or a ‘DD’ raw flat file image. Virtual forensic computing utilizes a mounted disk […]
↧