Author Question: Deciding how to destroy evidentiary materials that is no longer needed falls under the ________ ... (Read 7506 times)

tfester · **Reply #20 on:** May 5, 2019

Which of the following is one of the tools on the court-approved lists issued by the Federal Judiciary?

◦ Encase
◦ Sleuthkit
◦ FTK
◦ Paraben
◦ There is no list of court-approved tools.

T4T · **Reply #21 on:** May 5, 2019

There is no list of court-approved tools.

tfester · **Reply #22 on:** May 5, 2019

Thanks

T4T · **Reply #23 on:** May 5, 2019

Welcome

HCHenry · **Reply #24 on:** May 5, 2019

Which of the following suites is an open-source set of utilities that is made available to the community at no charge?

◦ FTK
◦ Encase
◦ Sleuthkit
◦ X-Ways

livaneabi · **Reply #25 on:** May 5, 2019

Sleuthkit

Mr3Hunna · **Reply #26 on:** May 5, 2019

Virtually all operating systems come with tools to manage the hard disk. The vast majority of these tools are unable to read metafiles such as the $MFT file in Windows 7. Why is this?

◦ The $MFT file is actually not part of the file system.
◦ Metafiles are database internal to the file system and are therefore locked out whenever the file system is mounted.
◦ While the metafiles are an integral part of the file system, the files themselves reside outside of the directory structure.
◦ Metafiles are protected system files and require access that user-level utilities are not granted by the OS.

kmb352 · **Reply #27 on:** May 5, 2019

Metafiles are protected system files and require access that user-level utilities are not granted by the OS.

mcmcdaniel · **Reply #28 on:** May 5, 2019

Software tools can be categorized as either "lossy" or "lossless". Which of the following tools are considered lossy?

◦ Windows Explorer
◦ A raw disk editor
◦ A disk imaging utility
◦ A network capture utility

bigcheese9 · **Reply #29 on:** May 5, 2019

A network capture utility