Re: Initial Machine login - Computer Forensics 101

["Danyelle Gragsone" <ladynikon () gmail com>]

uh.. that would break oh so many privacy laws..

but .. you would first make a copy of the HDD.  have a box with a 2nd
HDD in it .. make the first HD read only .. then back up the original
to the forensics copy.   Making it read only is key as you don't end
up changing any info on the first disk.

You don't have to log in as administrator to check data on the HDD
with the correct tools :D.