Monique has been asked to look into some possible corporate misbehavior by Samuel, a recently terminated employee, who seems now to be working for the competition. The competitive company has been calling their client base with offers undercutting their standard price structure. They suspect corporate espionage.

The first step Monique must complete is to complete a bit-stream forensic image of Samuel's company computer.

a. What Linux command would she use to complete this task?

b. Why is it important to have a complete bit-stream image of the disk, rather than a simple copy of the files?