Digital Forensics in Small Devices: RFID Tag Investigation

After execution of the above syntax, the forensic investigator could examine the
Stats Last Updated (see Figure 4.33) data to determine whether the statistics
were updated during the scope of an investigation or the statistics were not
concerning with the columns that were relevant in the investigation.
Figure 4.33: Fragment of the table statistics data
If the statistics were not relevant in the investigation, the investigator could
avoid acquiring the table statistics on the SQL Server. Otherwise, the following
command was used to acquire table statistics on the SQL Server 2005.
105