When cases go to trial, you as a forensics examiner can play one of ____ roles.

You provide ____ testimony when you answer questions from the attorney who hired you.

One way to hide partitions is with the windows disk partition utility, ____.

____ is a good tool for extracting information from large libpcap files.

____ increases the time and resources needed to extract, analyze, and present evidence.

The files that provide helpful information to an e-mail investigation are log files and ____ files.