312-49V11: Computer Hacking Forensic InvestigatorDemo

Frank, a forensic analyst, is handling a case involving a Linux server. The server was compromised, and Frank suspects that the attacker altered the file system to conceal evidence of their actions. He needs a tool that can perform in-depth file-system analysis on a Linux system. Which tool should Frank use for this task?