Question

what types of acquisition tools can be used for selective live acquisitions? (choose all that apply.)
a. the dos xcopy command
b. the dos robocopy command
c. ftk imager
d. x-ways imager

Explanation:

• DOS xcopy is a basic file copy command that can selectively copy specific files/directories from a live system, supporting selective live acquisition.
• DOS robocopy is an advanced file copy tool with more robust selective copying features (like filtering by file type, size, date) for live systems, suitable for selective live acquisitions.
• FTK Imager and X-Ways Imager are primarily used for creating full forensic disk images (static acquisitions) rather than selective live file acquisitions.

Answer:

a. The DOS xcopy command
b. The DOS robocopy command