QUESTION
(a) What do you meant by data spoliation?
(b) Justify the following statement: "Disk imaging differs from creating a standard backup of disk."
(c) Why do you need to be careful about the utilities you choose to use for disk imaging?
Give an example of a utility which is not recommended for forensics.
(d) What is an HPA?
(e) Distinguish between logical extraction and physical extraction.
(f) Name three types of data analysis.