1. Computer Forensic is a branch of digital forensic ( the forensic science includes recovery and investigation of material in digital device) to examine digital media with the goal: identifying, preserving, recovering, analyzing and presenting facts and opinions about the information.
2. Slack
space refers to partions of a hard drive
that are not fully used by the current allocated file and which may contain
data from a previously deleted file.
3. Unallocated
space is a cluster of storage media partition that is not used to save the
current of active file. Can occur when delete partition (may be with the data
because contain not fully erase).
4. Example command on Computer Forensic :
==> dd if=source of=destination
==> cfdisk -l
==> fdisk /dev/sd....
==> ls<dev> --> Ex: lsusb
No comments:
Post a Comment