ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 57 - ECSS discussion

Report
Export

Kevin, a forensic investigator at FinCorp Ltd., was investigating a cybercrime against the company. As part of the investigation process, he needs to recover corrupted and deleted files from a Windows system. Kevin decided to use an automated tool to recover the damaged, corrupted, or deleted files.

Which of the following forensic tools can help Kevin in recovering deleted files?

A.

Cain & Abel

Answers
A.

Cain & Abel

B.

Rohos Mini Drive

Answers
B.

Rohos Mini Drive

C.

R-Sludio

Answers
C.

R-Sludio

D.

Ophcrack

Answers
D.

Ophcrack

Suggested answer: C

Explanation:

Kevin, as a forensic investigator, can use theR-Sludiotool to recover corrupted and deleted files from a Windows system. R-Sludio is a powerful forensic tool that assists in data recovery and analysis.It allows investigators to examine filesystem images, analyze cache, cookies, history recorded in web browsers, and perform memory forensics1.

EC-Council Certified Security Specialist (E|CSS) documents and study guide.

EC-Council Certified Security Specialist (E|CSS) course materials.

asked 24/10/2024
Jeff Benson
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first