QuestionQ467

Network Forensics and Traffic Analysis

Adam is a professional Computer Hacking Forensic Investigator. He has been assigned a project to investigate and examine a drive image from a compromised system suspected of being used in cybercrime. Adam uses Forensic Sorter to arrange the hard-drive contents into different categories. Which of the following image-format types is NOT supported by Forensic Sorter?

  • A EnCase image file
  • B PFR image file
  • C RAW image file
  • D iso image file
Explanation

Forensic Sorter accepts RAW, PFR/Forensic Replicator, SafeBack, and EnCase forensic drive-image formats. ISO optical-disc images are not a supported Forensic Sorter input format.

Community Discussion

No comments yet. Be the first to start the discussion!