A forensic examination should inspect slack space because it

A forensic examination should inspect slack space because it

A.
Contains system level access control kernel.

B.
Can contain a hidden file or data.

C.
Can contain vital system information.

D.
Can be defeted to avoid detection.