Answer: Reconstruction Explanation:Reconstruction is the process of recreating a suspects disk to disk drive or image to disk or restoring deleted files. Tools like Coroner's Toolkit as used to reconstruct the events. Netstat, Fport, PsList are some tools which are available free.