You suspect that there are a number of deleted files that can still be salvaged in the unallocated space of a drive image. During which phase of the investigation would you use a data carving utility?
a. Examination
b. Acquisition
c. Identification/Assessment
d. Analysis
e. Reporting
a.
Computer Science & Information Technology
You might also like to view...
Which of the following is NOT a feature or function available by using Backstage in Office 2013?
A) Save a file B) Move a file C) View file properties D) Close a file
Computer Science & Information Technology
The ____ function is useful when you want to assign a value to a cell based on a logical test.
A. IF B. NOW C. AND D. OR
Computer Science & Information Technology