CHFI Tools Questions and Answers | Latest update Already Passed

CHFI Tools Questions and Answers | Latest update Already Passed in linux can be used locate residual data - DD Tool a. Networking/protocol stack tool and function - Netstat tool a. Allow view of information in the name resolution cache in a Windows machine - Nbtstat in Windows a. Allows view of routing table - 5. Route print i. A tool that blocks modification of the source drive - Write blocker a. DeepSpar Recovery Environment is a free Windows-based application b. DeepSpar Operations Server c. Forensics Add-on - DeepSpar Disk Imager . acquire data directly from IDE/EIDE/ATA/SATA/ATAPI/SAS/Firewire/USB hard drives and storage devices and save forensic images to Blu-Ray, DVD, CD, or hard drives - Fred system a a. Searches for chat logs - Paraben's Chat Stick