Question 16

Smith, a forensic examiner, was analyzing a hard disk image to find and acquire deleted sensitive files. He stumbled upon a $Recycle.Bin folder in the root directory of the disk. Identify the operating system in use.
  • Question 17

    Which of the following password cracking techniques works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?
  • Question 18

    Raw data acquisition format creates ____________of a data set or suspect drive.
  • Question 19

    What does the superblock in Linux define?
  • Question 20

    When operating systems mark a cluster as used but not allocated, the cluster is considered as
    _________