When using Windows acquisitions tools to acquire digital evidence, it is important to use a well- tested hardware write-blocking device to:
Automate Collection from image files
Avoiding copying data from the boot partition
Acquire data from host-protected area on a disk
Prevent Contamination to the evidence drive
Submit