PCs and Macs are changing. They are inheriting many features from the mobile devices. They use cloud accounts, SSDs, cryptography, always-on and connected-stand-by. These features are challenging and are changing extraction and analysis techniques. Now it’s not more possible to simply acquire an hard drive and then perform an off-line investigation. You have to mix and match different approaches.