Operates in a forensically sound manner to ensure no data on the target drive is modified during extraction. Disk Imaging: Can create verifiable disk images (e.g., in or RAW format) for laboratory analysis. Extraction of Hashes:
The user chooses to either "Reset Password," "Unexpire Account," or "Promote to Administrator."