Best practices require that when creating a forensic image of a computer, or other digital media used with a computer, a write-blocking device should be used.  Typically, practitioners turn to hardware write-blocking devices such as a  Tableau Forensic Bridge or others.  The common belief is that a physical hardware write-blocker is required for evidence acquisition. … Continue reading SoftBlock: A Viable Write-Blocking Option When Creating a Forensic Image of a Computer