A forensic technique where practitioners capture an entire image of a system and analyze the contents offline.
![dead-box forensics (noun) [Word Notes]](https://megaphone.imgix.net/podcasts/6d6f162c-c14c-11ef-9380-a310d2b56ee9/image/441b0ca2db080b93b935568d381ce462.png?ixlib=rails-4.3.1&max-w=3000&max-h=3000&fit=crop&auto=format,compress)