| http://www.w3.org/ns/prov#value | - According to this method, an investigator or other user attaches a data transfer device 200 as described above with regard to FIG. 3 between a forensic device 430 having a investigator's hard disk 420 included therein and a suspect's personal computer 410, as shown in FIG. 5.
|