Case 10-3 page 451
You have acquired a forensic image of a suspect’s laptop. After doing an examination, you discover at least one VM installed, and you think more data can be found, but you aren’t sure.
You decide to make a copy of the VM’s files and mount the VM as an external drive. Write the
best procedure for this situation.
© 2018 | Intelli Essays Homework Service®