the two steps in the data preservation process.
2. 2. Identify
and describe two digital forensic imaging tools.
3. 3. Understand
the differences between physical and logical extraction.
4. 4. Understand
the importance of repeatability and reproducibility as standards for imaging
5. 5. Differentiate
between allocated, unallocated, slack, and free space.
6. 6. Understand
the importance of report objectivity and reducing confirmation bias.
7. 7. Identify
different data files as potential sources of evidence. ( Each question answer will be minimum 150 words, no outside source is allowed for reference or citation. Only lecture note and sildes can be used for citation and refernce. Thank you.
1. 1. Explain the two steps in the data preservation process. 2.