ensure that you do not contaminate or alter data on the suspects hard drive by booting to the hard drive