The early pioneers of computer forensics believed that examinations should never take place in a Windows environment, as Windows routinely alters data and writes to the hard drive whenever it is used.