Before utilizing an analysis technique on computer evidence, the investigator should:
The following GREP expression was typed in exactly as shown. Choose the answer(s) that would result. [^a-z]Tom[^a-z]
An Enhanced Metafile would best be described as:
Creating an image of a hard drive that was seized as evidence:
If a floppy diskette is in the a drive, the computer will always boot to that drive before any other device.
Calls to the C:\ volume of the hard drive are not made by DOS when a computer is booted with a standard DOS 6.22 boot disk.
