In which of the following type of analysis might an examiner have difficulty proving that the evidence is original?

a. Log files
b. Disk to image file
c. Big data
d. Disk to disk image

Answer: c. Big data