Digital crime Flashcards by Lizzie Agombar

where to look for evidence?

allocated space –> file slack and cluster slack
unallocated space –> deleted files and file fragments

How well did you know this?