What is the investigator trying to analyze if the system gives the following image as output?

Which of the following files contains the traces of the applications installed, run, or uninstalled from a system?

What is the following command trying to accomplish?

What is the name of the Standard Linux Command that is also available as windows application that can be used to create bit-stream images?

You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?