Why don't we use the evidence drive for analysis?
a. We could, but we would risk losing the original to which we compare copies.
b. It is faster to copy it several times and then back to another hard drive than to just use it.
c. There is no way to prevent altering the drive if we perform analyses on it.
d. It is usually locked away in an evidence locker and we would have to sign it out on the chain of custody every time we use it.
Question 2
Requests for no-knockwarrants by investigators are not considered even inexigent circumstances.
Indicate whether the statement is true or false