Security Tools Part 6 (Forensics)

Question 1

What command-line utility is used to copy disk images using a bit by bit copying process?

Answer 1

dd

Note: You use dd to copy a disk image of evidense so that you can use the copy to conduct your investigation

Question 2

What data preview and imaging tool allows you to quickly assess electronic evidence to determine if it needs further analysis?

Answer 2

FTK Imager

Question 3

What Linux command-line utility dumps system memory to the standard output stream, skipping over holes in memory maps?

Answer 3

Memdump

Question 4

What commercial disk editor and universal hexadecimal editor is used for data recovery and digital forensics?

Answer 4

WinHex

Question 5

What digital forensics platform uses a graphical interface to The Sleuth Kit and other digital forensics tools?

Answer 5

Autopsy