A.with the hard drive removed from the suspect PC, check the date and time in the system's CMOS

B.with the hard drive in the suspect PC, check the date and time in the File Allocation Table

C.with the hard drive removed from the suspect PC, check the date and time in the system's RAM

D.with the hard drive in the suspect PC, check the date and time in the system's CMOS

A.Previously typed commands

B.Events history

C.Passwords used across the system

D.History of the browser

A.Colasoft's Capsa

B.DriveSpy

C.Xplico

D.Wireshark

A.Status of the network carrier

B.Network connections

C.Contents of the network routing table

D.Contents of the NetBIOS name cache

A.Atola Insight Forensic

B.Triage-Responder

C.UltraKit

D.F-Response Imager