Digital Forensics Validation Manual

The software correctly parses Windows prefetch files and outputs the results in a HTML report. The software correctly interprets the number of times a program has been executed. ... Create a physical disk image of the disk connected to the forensic computer using FTK Imager. Store the disk image on the forensic computer. ................
................