After selecting an image to restore, the user is offered:
An IT auditor needs to preserve a computer’s state before investigation. Booting from the BootCD prevents any writes to the suspect drive (thanks to "Read-only mount" mode). They create a sector-by-sector image directly to an encrypted external drive, preserving evidence for court.
R-tools R-drive Image V7.1 Build 7110 Bootcd !!top!! -
After selecting an image to restore, the user is offered:
An IT auditor needs to preserve a computer’s state before investigation. Booting from the BootCD prevents any writes to the suspect drive (thanks to "Read-only mount" mode). They create a sector-by-sector image directly to an encrypted external drive, preserving evidence for court.