Sleuth's kit has everything for forensics except that it does not have disk imaging software. it is very expensive. it can't be used for hard disk. it is only good for log file analysis. QUESTION 2 Autopsy is a competitor for Sleuth's kit and has more features. not for forensics. o a licensed (not free) version of Sleuth's kit. a graphical user interface (GUI) for Sleuth's kit QUESTION 3 In NTFS, a deleted compressed file is hard to recover because it is encrypted it uses multiple sectors. ?it requires Microsoft's secret compression algorithm. it may be using multiple compression algorithms