A.the investigator has to get a warrant

B.the investigator does not have to get a warrant

C.the users have standard corporate equipment and software

D.the users can load whatever they want on their machines

A.Steganography

B.Data Deduplication

C.Password Protection

D.Encryption

A.Event logs are saved in .xml format

B.Event log record structure

C.Configuration information of a specific Event Log

D.List of available Event Logs

A.Automated Field Correlation

B.Time (Clock Time) or Role-Based Approach

C.Profile/Fingerprint-Based Approach

D.Bayesian Correlation

A.White space

B.Slack file

C.AFS

D.ADS