Non-traditional collection Flashcards
1
Q
What is F-Response
A
A remote collection device that allows us to obtain images as if they were local.
2
Q
What is velociraptor
A
A remote collection application that does everything but allow penetration tests.
Uses VQL
3
Q
How should you do cloud collection with Google Takeout?
A
Give the user a secure password and ask them to change it to that.
4
Q
How do we collect data from a mobile device?
A
We use iTunes to create a backup.
5
Q
What are other tools to do mobile device collection?
A
Cellebrite
6
Q
How can we ingest iPhone backups?
A
Autopsy
7
Q
What happens if we do not encrypt a collection from an iPhone?
A
It does not come with all of the data.
