What method would be most efficient for you to acquire digital evidence from this network?

You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data.

What method would be most efficient for you to acquire digital evidence from this network?
A . create a compressed copy of the file with DoubleSpace
B . create a sparse data copy of a folder or file
C . make a bit-stream disk-to-image file
D . make a bit-stream disk-to-disk file

View Answer

Answer: C