This is not possible. Even with the most stealthy data forensic tools, when conducting a live acquisition there is still a trace on the system. Weather in RAM or on the HDD there will be a trace, one would just need to know what to look for. When conducting an acquisition of a media that is powered off, thats another story.
This is not possible. Even with the most stealthy data forensic tools, when conducting a live acquisition there is still a trace on the system. Weather in RAM or on the HDD there will be a trace, one would just need to know what to look for. When conducting an acquisition of a media that is powered off, thats another story.