Which of the following actions would invalidate the authenticity of digital evidence during a forensic investigation?
Digital evidence must be preserved without altering the original media. Installing forensic software on the original drive writes data to it and changes the evidence, undermining its authenticity and integrity.
Community Discussion