What tool, currently maintained by the IRS criminal investigation division and limited to use by law enforcement, can analyze and read special files that are copies of a disk?
a. AccessData forensic toolkit
b. DeepScan
c. ILook
d. Photorect
A chain-of-evidence form, which is used to document what has and had not been done with the original evidence and forensic copies of the evidence, is also known as a(n) ________
a. single-evidence form
b. multi-evidence form
c. evidence custody form
d. evidence tracking form