Hargreaves, C. J.
(Department of Informatics and Sensors, 2009-11-24)
The traditional approach to a digital investigation when a computer system is
encountered in a running state is to remove the power, image the machine using a
write blocker and then analyse the acquired image. This has ...