12-19-2018, 01:37 PM
(12-19-2018, 12:10 PM)Dolphin999 Wrote: Hello Tony, after you tick the write blocking, it is fully read-only and won't do any write operations on the patient. The only missing part for forensic image is the real-time checking.
Might pay to check the SMART on the drive before and after acquiring the image just to see if anything important changed during the acquisition i.e. if the drive condition degrades during the process.
Dolphin, does DDP have hashing capability for forensic images?