when using windows acquisitions tools to acquire digital evidence it is important to use a well-tested hardware write-blocking