← All EvidenceDirectDirect Examination - Kyle Pavao Kyle Pavao Jennifer Sprague
Digital Evidence
Forensic computer image of a Surface Pro
Pavao described the EnCase forensic image as a bit-for-bit copy of the Surface Pro's drive. He explained that examining the image did not change the computer's original data.