Collecting Digital Evidence, Scenario #3
In this third and final video exercise on collecting digital evidence, we use a different recovery tool, foremost, to "unpack" the replica file created in Scenario #2. The goals of this lab are to examine the results of the new tool and compare these to what was discovered in previous labs.
You should contemplate why multiple recovery tools co-exist in the forensics environment.