26. Data Sources: Local Drives

• Local drives are your C: or E: drives

• You can analyze them:

  • Preview a live system (i.e. triage)

  • USB-attached device (optionally via write blocker)