Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
12
Posts
9
Users
0
Reactions
4,563
Views
02/04/2013 10:19 pm
If you don't have a physical write blocker you can use a registry key for USB to write protect those. If you don't use a blocker at all odds are some dates will change, but other than that nothing else should change.
09/04/2013 3:41 am
You could try to boot into PALADIN and mount the disk as read only and then image the disk. Obviously you will want to use a write-blocker when possible; however, like you said it is for educational purposes.
Page 2 / 2
Prev