Review Questions

1. Which utility, originally created for the UNIX platform, copies and converts files using two basic arguments (if and of)?

2. Which software suite provides an enterprise edition that specifically supports volatile data analysis on a live Windows system?

3. Which disk imaging software operates as an extended DOS command shell?

4. What are MD5 and SHA-1?

5. Which forensic software suite integrates the dtSearch Engine in its searching function?

6. What two software suites are free?

7. Name two vendors of forensic hardware.

8. After creating an image of a drive, what must you do to ensure that the copy matches the original?

9. You have many factors to consider when choosing appropriate forensic software. Name two.

10. Which two forensic products can extract both active and deleted text messages from a mobile phone?

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.147.28.9