1
Q
What layer is information gather in passive data collection?
A
Layer 2 or above.
2
Q
What is tcpdump?
A
A tool for capturing, filtering, and analysing network traffic.
3
Q
What is Wireshark?
A
A GUI-based sniffer application for ‘sniffing’ data and packets over a network.
4
Q
What is netstat?
A
A command-line tool that displays network connections, routing tables, netowrk interface and netowkr protocol statisitcs.
CS414 - Digital Forensics
flashcards
Decks in class (30)
# Cards
-
Week 1 - Further Overview14
-
Week 1 - The Place of Digital Forensics6
-
Week 1 - The Investigative Process13
-
Week 1 - Computer Crime5
-
Week 1 - Fact & Faction1
-
Week 1 - Obstacles8
-
Week 2 - Standard Procedures12
-
Week 3 - Types of Evidence9
-
Week 3 - Storage Devices19
-
Week 3 - Evidence Collection9
-
Week 3 - Stages of Acquisition20
-
Week 4 - Write-Blocking & Hashing15
-
Week 4 - Forensic Disk Imaging6
-
Week 4 - Searching for Evidence15
-
Week 4 - Search Locations10
-
Week 4 - Tools & Toolkits5
-
Week 4 - File Systems6
-
Week 5 - Metadata12
-
Week 5 - Data Storage Devices5
-
Week 5 - Data Storage24
-
Week 6 - File Systems7
-
Week 6 - Example File Systems22
-
Week 8 - Obstacles Revisited6
-
Week 8 - Data Hiding5
-
Week 8 - Cyphering, Excryption etc.4
-
Week 9 - Anti-Forensics17
-
Week 9 - Hostile Code6
-
Week 10 - Passive & Active Data Collection18
-
Week 10 - Emails and Web Data13
-
Week 10 - Capturing Network Traffic4
