____ is a good tool for extracting information from large libpcap files.

A ____ is where you conduct your investigations, store evidence, and do most of your work.

Exchange logs information about changes to its data in a(n) ____ log.

Fre ____ describes whether the expert is qualified and whether the expert opinion can be helpful.

Most packet analyzer tools can read anything captured in ____ format.

Some e-mail systems store messages in flat plaintext files, known as a(n) ____ format.

When cases go to trial, you as a forensics examiner can play one of ____ roles.