Symantec Ghost (GHO)

From ForensicsWiki
Revision as of 19:11, 21 February 2018 by Lc (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Ghost images can be created by the Symantec Ghost suite, a backup platform that by default excludes the contents of unallocated space.


See also: https://www.giac.org/paper/gsec/3043/forensic-acquiring-analysis/105083