Question 6 (1 point) Every object of the Windows NTFS filesystem has which of the following timestamps (select 4)? A: The date of data access M: The date of data modification B: The date of metadata creation C: The date of metadata change OX: The date of data exfiltration Question 7 (1 point) Which of the following are examples of activities in Windows that occur automatically and provide data for building a timeline (select 3)? Disk formatting Windows XP System Restore Points Windows 7 Volume Shadow Copy Disk defragmentation