To understand the impact of a malicious program after the booting process and to collect recent information from the disk partition, an investigator should eval...