when using the sleuth kit to examine the image file windows evidence 001.dd located at c:\chfi-tools\evidence files\forensic images in chfiv10 windows server 2016 machine, what command do you need to run, to determine the mft entry for $logfile? specify the correct command in the below answer field.

icon
Related questions
Question
when using the sleuth kit to examine the image file windows evidence 001.dd located at c:\chfi-tools\evidence files\forensic images in chfiv10 windows server 2016 machine, what command do you need to run, to determine the mft entry for $logfile? specify the correct command in the below answer field.
Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer