Can I Run SurfRecon in a Write-Block Mode?

SurfRecon does make available a reboot CD for the Elite version of the software. The reboot CD creates write-blocked environment when you reboot the computer system that allows you to scan, detect, analyze, and categorize image files without compromising any of the suspect files' CMA records.

This mode is ideal when it is necessary to maintain the integrity of evidence found on a suspect's computer system. However, it should be understood that this procedure requires some technical expertise, more time, and the proper authorization to reboot the suspect computer system.



Topics: writie block, protected, evidence, CMA, dates, reboot