Digital Forensics 4

Question 1

This tool runs on Windows and has a graphical user interface. It is not as full featured as EnCase or FTK, but it is free and very easy to use.

Answer 1

Disk investigator

Question 2

In a ??? ???, the attacker sends a fake TCP SYN packet with the same source and destination IP addresses and ports as the target computer. Basically, the computer is tricked into thinking it is sending messages to itself because the packets coming in from the outside are using the computer’s own IP address.

Answer 2

Land Attack

Question 3

A ??? ??? generates a large number of ICMP echo requests from a single request, acting like an amplifier.

Answer 3

Smurf Attack

Question 4

A ??? ??? is similar to a smurf attack, except that it uses spoofed UDP packets instead of ICMP echo replies.

Answer 4

Fraggle Attack