Problem
Discuss three Specialised use cases of an EnCase forensic tool. That is the use case can be a hypothetical situation that uses EnCase. Remote Memory acquisition and Cloud forensics are two features that set EnCase apart. For instance, bots in a DDoS attack use virtual machines, which can be destroyed after the attack, so in a real attack scenario, a forensics investigator would use EnCase Remote Memory acquisition while the attack was still ongoing and after moving to backup to gather as much information as they could about the memory IP that the virtual machine using to launch the attack in order to conduct a more thorough investigation and identify the individual or group responsible.