A security incident has occurred on a file server. Which of the following data sources should be gathered to address file storage volatility?
1) Partition data
2) Kernel statistics
3) ROM data
4) Temporary file systems
5) Process table