Symantec Ghost (GHO)

From ForensicsWiki
Revision as of 17:56, 29 January 2018 by Lc (Talk | contribs) (stub created)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Ghost images can be created by the Symantec Ghost suite, a backup platform that excludes unallocated space.


See also: https://www.giac.org/paper/gsec/3043/forensic-acquiring-analysis/105083