When using Windows acquisitions tools to acquire digital evidence, it is important to use a well- tested hardware write-blocking device to:

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well- tested hardware write-blocking device to:

A.
Automate Collection from image files

B.
Avoiding copying data from the boot partition

C.
Acquire data from host-protected area on a disk

D.
Prevent Contamination to the evidence drive