contestada

If possible an investigator should always conduct forensic analysis of a hard drive using an image of that drive.
True
False