Review Questions
1. Which utility, originally created for the UNIX platform, copies and converts files using two basic arguments (if and of)?
2. Which software suite provides an enterprise edition that specifically supports volatile data analysis on a live Windows system?
3. Which disk imaging software operates as an extended DOS command shell?
4. What are MD5 and SHA-1?
5. Which forensic software suite integrates the dtSearch Engine in its searching function?
6. What two software suites are free?
7. Name two vendors of forensic hardware.
8. After creating an image of a drive, what must you do to ensure that the copy matches the original?
9. You have many factors to consider when choosing appropriate forensic software. Name two.
10. ...
Get Computer Forensics JumpStart, Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
