Briefly explain NTFS compressed files.
What will be an ideal response?
ANSWER: To improve data storage on disk drives, NTFS provides compression similar to FAT DriveSpace 3, a Windows 98 compression utility. With NTFS, you can compress files, folders, or entire volumes. With FAT16, you can compress only a volume. On a Windows NT or later system, compressed data is displayed normally when you view it in Windows Explorer or applications such as Microsoft Word.
During an investigation, typically you work from an image of a compressed disk, folder, or file. Most forensics tools can uncompress and analyze compressed Windows data, including data compressed with the Lempel-Ziv-Huffman (LZH) algorithm and in formats such as PKZip, WinZip, and GNU gzip. However, forensics tools might have difficulty with third-party compression utilities, such as the .rar format. If you identify third-party compressed data, you need to uncompress it with the utility that created it.
You might also like to view...
The programs used by the computer to control and maintain hardware and to communicate with the user are:
a. applications software b. browsers c. shareware d. system software
What command is used to view all tables in the current MySQL database?
a. LIST TABLES; b. SHOW TABLES; c. SELECT TABLES; d. VIEW TABLES;
What is the most common type of relationship in Access?
A) Many-to-many B) Many-to-one C) One-to-many D) One-to-one
Comments display in the nonprinting:
A) markup area. B) markup pane. C) review area. D) review pane.