When using PRTK to attack encrypted files exported from a case, which statement is true?
Which three items are displayed in FTK Imager for an individual file in the Properties
window? (Choose three.)
Which statement is true about using FTK Imager to export a folder and its subfolders?
What happens when a duplicate hash value is imported into a KFF database?
You view a registry file in Registry Viewer. You want to create a report, which includes items that you have marked "Add to Report." Which Registry Viewer option accomplishes this task?
You examine evidence and flag several graphic images found in different folders. You now want to bookmark these items into a single bookmark. Which tab in FTK do you use to view only the flagged thumbnails?
When adding data to FTK, which statement about DriveFreeSpace is true?
Click the Exhibit button.
You need to search for specific data that are located in a Microsoft Word document. You do not know the exact spelling of this datA. Using the Index Search Options as displayed in the exhibit, which changes do you make in the Broadening Options and Search Limiting Options containers?