Question
An investigator calculates a hash before and after imaging a drive. What is the main purpose?
Select an option. Your answer will be checked instantly.
Correct Answer: A. To prove the image matches the original
Explanation:
Matching hashes support integrity of forensic copies.
Leave a Reply