Symantec Ghost (GHO)

From ForensicsWiki
Jump to: navigation, search

Ghost images can be created by the Symantec Ghost suite, a backup platform that by default excludes the contents of unallocated space.


See also: https://www.giac.org/paper/gsec/3043/forensic-acquiring-analysis/105083