Which of the following describes when forensic hashing should occur on a drive?
A.
After the imaging process and before the forensic image is captured
B.
Before the imaging process and then after the forensic image is created
C.
After the imaging process and after the forensic image is captured
D.
Before and after the imaging process and then hash the forensic image