What is a swap file and how is it useful for forensic examiners?

What will be an ideal response?


A swap file is a space on the hard disk drive where programs and data not presently being used are temporarily stored. The swap file allows the user to retrieve the stored data quickly without having to search the hard disk drive for it. Data that is swapped back and forth in this fashion is sometimes left
behind in the swap file and may be recovered by a forensic examiner.

Criminal Justice

You might also like to view...

It is an old adage that ignorance leads to fear, and fear leads to:

a. Anger b. Hate c. Sadness d. None of the above

Criminal Justice

The first victim/witness assistance programs were established by the district attorneys offices in Brooklyn, NY and Milwaukee, WI in 1974

Indicate whether the statement is true or false

Criminal Justice

Truth-in-sentencing laws require that there be a truthful, realistic connection between the custodial sentence imposed on offenders and the time they actually serve, and they mandate that inmates serve at least ______ % of their sentences before becoming eligible for release.

A. 20 B. 45 C. 85 D. 60

Criminal Justice

What are the three main components of the criminal justice system?

a. investigations, arrest, and prosecution b. law enforcement, police, and the courts c. law enforcement, courts, and corrections d. arrest, investigations, and incarceration

Criminal Justice