CAINE can be used as a live system to perform forensic studies of a system (e.g. after a Incident).