(a) Name five important activities involved in a digital forensic investigation.
(b) Briefly describe the three types of data that a forensic examiner has to work with. Which one of the three is more difficult to obtain?
(c) (i) What is the Trojan Defence?
(ii) State whether this defence is successful or not in court? Explain your reasoning.
(iii) Explain how the Trojan Defence can be used as an anti-forensics technique?
(iv) Why is this anti-forensics technique often successful?