C702 (WGU) FORENSICS TOOLS
CORRECT 100%
Quick Recovery - ANSWERused for encrypted files/protected passwords and bad
disk sectors
Total Recall - ANSWERused for recovering RAID
SysAnalyzer - ANSWERmalware analyzer
Stellar Phoenix - ANSWERrecovering RAW volumes, keeps original name
jv16 - ANSWERdata registry tool
Data Rescue 4 - ANSWERrecovers reformatted drives from HFS and HFS+
File Salvage - ANSWERrecovers lost files and scratched CD's
EaseUS - ANSWERrecovers large disk drives and offers specific searches
OnTrack Easy Recovery - ANSWERrecovers and protects data
Advanced Disk Recovery - ANSWERscans system for deleted files and tries to
recover them
Active@ File Recovery - ANSWERContains an ISO image
Stellar Phenix - ANSWERRecovers file with their original file name and supports
RAW recovery on lost volumes
net session - ANSWERDisplays information about all logged in sessions on a local
Windows computer
net use - ANSWERTo see if sessions are opened with other systems
net view - ANSWERReview file shares and ensure their purpose
net start - ANSWERLook for unusual network services that are running
DiskDigger - ANSWERgives thumbnail previews and recovers hard drives and
external memory (USB's)
R Studio - ANSWERgives raw file for heavily damaged file systems or unknown sys
Pandora - ANSWERrecover FAT and NTFS formatted volumes
CORRECT 100%
Quick Recovery - ANSWERused for encrypted files/protected passwords and bad
disk sectors
Total Recall - ANSWERused for recovering RAID
SysAnalyzer - ANSWERmalware analyzer
Stellar Phoenix - ANSWERrecovering RAW volumes, keeps original name
jv16 - ANSWERdata registry tool
Data Rescue 4 - ANSWERrecovers reformatted drives from HFS and HFS+
File Salvage - ANSWERrecovers lost files and scratched CD's
EaseUS - ANSWERrecovers large disk drives and offers specific searches
OnTrack Easy Recovery - ANSWERrecovers and protects data
Advanced Disk Recovery - ANSWERscans system for deleted files and tries to
recover them
Active@ File Recovery - ANSWERContains an ISO image
Stellar Phenix - ANSWERRecovers file with their original file name and supports
RAW recovery on lost volumes
net session - ANSWERDisplays information about all logged in sessions on a local
Windows computer
net use - ANSWERTo see if sessions are opened with other systems
net view - ANSWERReview file shares and ensure their purpose
net start - ANSWERLook for unusual network services that are running
DiskDigger - ANSWERgives thumbnail previews and recovers hard drives and
external memory (USB's)
R Studio - ANSWERgives raw file for heavily damaged file systems or unknown sys
Pandora - ANSWERrecover FAT and NTFS formatted volumes
