Question 16
Smith, a forensic examiner, was analyzing a hard disk image to find and acquire deleted sensitive files. He stumbled upon a $Recycle.Bin folder in the root directory of the disk. Identify the operating system in use.
Question 17
Which of the following password cracking techniques works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?
Question 18
Raw data acquisition format creates ____________of a data set or suspect drive.
Question 19
What does the superblock in Linux define?
Question 20
When operating systems mark a cluster as used but not allocated, the cluster is considered as
_________
_________
