A suspect typed a file on his computer and saved it to a floppy diskette. The filename was MyNote.txt. You receive the floppy and the suspect computer. The suspect denies that the floppy disk belongs to him. You search the suspect computer an d locate only the filename within a .LNK file. The .LNK file is located in the folder C : \ Windows\Recent. How you would use the .LNK file to establish a connection between the file on the floppy diskette and the suspect computer?
A) The file signature found in the .LNK file
B) The dates and time of the file found in the .LNK file, at file offset 28
C) Both a and b
D) The full path of the file, found in the .LNK file
Correct Answer:
Verified
Q18: EnCase can build a hash set of
Q19: The following GREP expression was typed in
Q20: Which of the following items could contain
Q21: A restored floppy diskette will have the
Q22: The EnCase evidence file logical filename can
Q24: You are assigned to assist with the
Q25: Assume that MyNote.txt has been deleted. The
Q26: A sector on a floppy disk is
Q27: An Enhanced Metafile would best be described
Q28: In the FAT file system, the size
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents