Problem
A general maxim of computer forensics analysis is that the best digital evidence is normally original or a "true copy" of the information in question. Digital evidence, by its nature, is based on hexadecimal expression of fixed- length data segments, which must be complete to fully express the underlying information. IDENTIFY AND DESCRIBE three reasons why system forensics examiners would want to recover digital evidence from bit-level backups.