Law enforcement arrives to obtain a physical hard drive that was confiscated in
ID: 3751482 • Letter: L
Question
Law enforcement arrives to obtain a physical hard drive that was confiscated in relation to a certain incident. Law enforcement is told that the hard drive was imaged with dd immediately after confiscation. Law enforcement reviews the local imaging procedures and deems the evidence as potentialby tampered with. Which of the following could be the reason? O B. o c O D An outdated version of dd was used Hashing was performed with MDS write blockers were not used Lessons learned reports were not generated
Explanation / Answer
Answer)
C) As the write blockers were not used hence that was confiscated.
Hit like if you find the answer useful. :)
Hope this answer helps. Thanks
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.