Hello all
Just a quick question.
ACPO principle one 'No action taken by law enforcement agencies or their agents should change data held on a computer or storage media which may subsequently be relied upon in court. '
I was just wondering how this relates to putting a system into hibernation; rather than simply unplugging it.
Whilst it is technically modifying the system disk, it is not modifying any user data on the disk.
I'm guessing that it's a no-go; as it is altering the disk contents.
Any information would be appreciated.
Thanks
Tony
Principle 1 is modified by Principle 2, "In circumstances where a person finds it necessary to access original data held on a computer or on storage media, that person must be competent to do so and be able to give evidence explaining the relevance and the implications of their actions"
If you are "that person" do you fully understand the implications of putting a system into hibernation? If so then you would be acting within the scope of the APCO guidelines.
Hi Tony,
As long as you document why your put the system into hibernation (keep data in the page file), you should be fine. however, if there was no need to you now to pull the plug, then you may get pulled up.
Thanks very much!
Tony