Sometimes, when a computer forensics expert is dissecting a suspect’s computer, the most important question to answer is this: “Am I looking at the original hard-drive, with all of its incriminating evidence, or has that drive been swapped out surreptitiously for a new drive, which will not contain the evidence that I’m hoping to find?”
In a significant breakthrough in the world of computer forensics, a small forensics company, CynanLine LLC, has discovered a little-known feature of most major hard-drives – buried deep within their operating systems – that can reveal to computer forensic experts the exact number of times that the examined hard-drive has been turned “On,” and the exact number of hours that the specific hard-drive has been used inside the computer…