Disk Digger - ANSWER ==Lost files from HDs, USB, Etc.....thumbnail previews,
R-Studio - ANSWER ==· recovers data from disks.
Capsa - ANSWER ==Network
... [Show More] Analyzer
Tripwire - ANSWER ==File Integrity
UTC - ANSWER ==Coordinated Universal Time
Rule 101 - ANSWER ==governs proceeding 101 :)
rule 103 - ANSWER ==Evidence
MBR size - ANSWER ==512 bytes
MBR partition table size - ANSWER ==64bytes
Frye - ANSWER ==Scientific testimony
0x55aa - ANSWER ==mbr
rule 402 - ANSWER ==admissability
file salvage tool - ANSWER ==mac computers
total recall - ANSWER ==Raids & deep scans
get-partitiontable - ANSWER ==details about partitions
get-gpt - ANSWER ==used for partitioning
sector size - ANSWER ==512 bytes
18 usc 2252a - ANSWER ==child porn law
18 usc 1030 - ANSWER ==fraud
LBA size on MBR - ANSWER ==32 bits
Cylinders, heads, sectors (CHS) - ANSWER ==sector addressing on disk
civil investigation - ANSWER ==informal initial investigation
ETI - ANSWER ==Enterprise theory of investigation (Holistic)
disk density - ANSWER === track, area and bit density
uefi 5 boot phases - ANSWER ==sec, pei,dxe, bds and RT
sec phase - ANSWER ==code inialized
pei - ANSWER ==hobl created
MBR starts at - ANSWER ==zero
swgde - ANSWER ==Scientific Working Group on Digital Evidence
windows 8 and above - ANSWER ==eufi-gpt or bios-mbr
windows 7 and below - ANSWER ==bios-mbr only
rt phase - ANSWER ==uefi cleared from memory
sec phase - ANSWER ==code is initalized
disk utility tool - ANSWER ==GPT on MACs
recover my files tool - ANSWER ==file recovery
hashmyfiles - ANSWER ==hashing
hashcalc - ANSWER ==hashing
md5 calculator - ANSWER ==hashing
priv.edb - ANSWER ==headers, text, attachments
priv.stm - ANSWER ==mime, videos, audio
pub.edb - ANSWER ==database,hierarchies
quick recovery - ANSWER ==bad sectors, password protected files,
Advanced Disk Recovery - ANSWER ==quick and deep scanning
recover my files - ANSWER ==preview data on the fly [Show Less]