News for hackers. Stuff that matters.

A comment on Outcry as Australian police search public broadcaster. Parent comment

Re:Outcry as Australian police search public broadcaster by chopin on Wednesday June 05, 2019 @02:11PM (#20107417)
But this isn't a way to do a forensic analysis. You just clone the hard drive. Anything else should not be able to stand up in court.

Afaik it is practice in rule-of-law countries to hand a clone to each party in the case.

[ Parent | on HN ]
Re:Outcry as Australian police search public broadcaster by doomjunky on Wednesday June 05, 2019 @08:10PM (#20110336)
Forensic analysts must use read-only adapters to clone hard drives.
[ Parent | on HN ]