You are performing digital forensics in an enterprise that recently experienced a security breach. You successfully retrieved all volatile data, and your next focus is hard drives. How should you collect evidence from the hard drives without tainting any evidence

Respuesta :

How should you collect evidence from the hard drives without tainting any evidence is to: Use mirror image backup.

What is mirror image backups?

Mirror image backups can be defined as a type of backup that enables you to backup all the document or items that you have on your computer hard drive.

Mirror image backup is vital because it enables you to have the same copy  of all the data or information that is store on your hard drive.

Therefore how should you collect evidence from the hard drives without tainting any evidence is to: Use mirror image backup.

Learn more about Mirror image backups here:https://brainly.com/question/21465714