Q77
Single choice
An analyst is imaging a hard drive that was obtained from the system of an employee who is suspected of going rogue. The analyst notes that the initial hash of the evidence drive does not match the resultant hash of the imaged copy.
Which of the following best describes the reason for the conflicting investigative findings?