Python Digital Forensics Cookbook
上QQ阅读APP看书，第一时间看更新
上一章目录下一章

How to do it…

We perform the following steps to forensically copy files on a Windows system:

  1. Gather source file and destination arguments.
  2. Use shutil to copy and preserve most file metadata.
  3. Manually set timestamp attributes with win32file.
上一章目录下一章