Dead and Live box Data Acquisition
Compare and contrast dead and live box data acquisition. When would a live acquisition be preferable to a dead acquisition? Is it legal or accepted practice to copy evidence from a cloud provider during live acquisition, such as copying files from a suspect's Dropbox account before shutting off the system? A live acquisition is where data is retrieved from a digital device directly via its normal interface when its powered; for example, switching a computer on and running programs from within the operating system well as dead-box acquisition is the methodology referred to as “pull the plug” on the computer system prior to acquiring an exact copy of the hard drive, a technique that analyzes the data at rest (MAYO, 2016). A live acquisition be preferable When the investigator is to confiscate a live system before cutting the power. A live system refers to system that are up and running where information may be altered as data is continuously processed and Switching it off may ...