The first tool for making forensic copies of computer storage media was:
A) EnCase
B) Expert Witness
C) dd
D) Safeback

Question

Quizplus · Accepted Answer

The "dd" command, originating from Unix, is the earliest tool used for making bit-by-bit copies of computer storage media, which is essential for forensic analysis. It predates the more specialized forensic tools like EnCase, Expert Witness, and SafeBack, offering a versatile method for data duplication and recovery since its inception.

The First Tool for Making Forensic Copies of Computer Storage