title: forensic acquisition with SANS SIFT Workstation Appliance
body: <p>Is there a way to do a forensically sound acquisition of a USB drive or SD Card using the SANS SIFT workstation? That is, does it have a built-in write-blocker?</p>