Problem
a) What is the function of the Helix system?
b) What are the benefits of this tool?
c) How does it work in terms of digital evidence collection?
d) How do you get evidence of Unix, Linux, and Mac OS operating systems with this tool?
e) What benefits does the digital evidence researcher have with this system?
f) How does the evidence acquisition process work in the Unix system?
g) How do your file systems work?
h) How do the digital evidence processing tools used in these systems work?
i) How is information retrieved from these systems?
j) How are file systems tracked?
k) How is the Internet tracked?