Question

What is the name of the technique a forensics examiner uses to find leftover fragments, files, and other materials that the filesystem does not list?
Group of answer choices

Hashing

Imaging

Carving

Recovery

Answer 1

The technique a forensics examiner uses to find leftover fragments, files, and other materials that the filesystem does not list is called **Carving**.