5 - File forensics

Question 1

Base64

Answer 1

Encode binary objects into text

Question 2

Syntactic analysis

Answer 2

The ability to parse the format of a file so as to identify its internal structure and components
Techniques:
Raw file inspection
File format discovery
String extraction
Encrypted file cracking
File header reparation

Question 3

Magic numbers

Answer 3

Consist of constant numerical or text value used to identify a file format or protocol

Question 4

Semantic analysis

Answer 4

The ability to interpret and acquire information from the data content of a given file
Techniques:
Vulnerability analysis
Provenance analysis
Image processing