Collin, a forensic officer, was investigating a crime scene. After collecting a suspected laptop from the spot, Collin started inspecting a specific portion of the drive where the criminal had saved the victim$$s data while performing the malicious activity. Collin collected the files required for the investigation as well as fragments of deleted data. Which of the following data acquisition methods did Collin perform in the above scenario?