What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 sever the course of its lifetime?
forensic duplication of hard drive
analysis of volatile data
comparison of MD5 checksums
review of SIDs in the Registry
Submit