A valid point, although my 'aint broke don't fix it' was more referring to the computer and all it's forensic software working, rather than flaws in third party drivers etc.
With regards to unknowingly copying or accessing malicious files that's where having a good AV comes in to play. As part of an in depth analysis we used to mount the image, then first run AV scans to identify any potentially malicious files. Obviously this is not fool proof but with an air gapped machine that has no network access there is very little damage that can be done should we access a virus.
↧