"a forensics executive, suspects that a malware is continuously making copies of files and folders on a victim system to consume the available disk space. what type of test would confirm his claim"