Note 1: Triage-G2 is switchable between Advanced and Basic Modes.
Note 2: Triage-Investigator cannot be used to create custom Search Profiles but it can run any Search Profiles created using Digital Evidence Investigator (DEI).
Note 3: Triage-Investigator can only image drives during live or boot scans.
|Description||Powered-OFF Computers||Powered-ON Computers|
|Change to file time stamps||No||No|
|USB key registry entry in standard mode||No||Yes|
|USB key registry entry in stealth mode (Triage-G2 only)||No||No|