Question
A forensic examiner is dealing with file carving. Which action is most appropriate?
Correct Answer: A
Document the process and preserve evidence integrity.
Forensic work requires documentation and preservation of evidence integrity, especially when handling file carving.
Forensic work requires documentation and preservation of evidence integrity, especially when handling file carving.
Leave a Reply