3 ms·They don't run forensics on the actual device if at all possible, only a read-only cloned image.by dharmab 8y agoThey don't run forensics on the actual device if at all possible, only a read-only cloned image.