US-CERT is generally viewed as the definitive authority for computer emergency response teams.

Deleted files from a flash drive are moved to the Recycle Bin

Indicate whether the statement is true or false

Which of the following is NOT considered an objective in ensuring probative information is recovered?

A) To protect the computer system during the actual investigation B) To determine if steganography was used C) To recover deleted, existing, hidden, and password protected files D) To search for any and all malware that may have infected the system