We have a computer that has potentially been compromised. I want to clone the hard drive to look though the logs without affecting the original drive. What settings should I use and pay attention to in order not to mess any logs up? Should I use disc to image or disk to disk? Also, I'm assuming that I clone the entire disc, not partitions.
↧
