Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Are Evidence Discovery Packs associated with a specific drive? Can I use an EDP for multiple hard drives?

April 26, 2017associated Discovery drive edp Hard Drives packs

0

Posted

Are Evidence Discovery Packs associated with a specific drive? Can I use an EDP for multiple hard drives?

1 Answer

0

Posted

Evidence Discovery Packs are highly customized to the drive for which they will be used. In addition to the physical drive, EDPs are specific to the state of the data on that drive during analysis. Each unique EDP can be run only on the drive for which it was configured. In addition, any change in the suspect drive’s data will render the EDP unusable for that drive. As long as the suspect drive’s data have not been modified, however, the EDP may be run multiple times, if necessary, to re-extract data.