Topic 9

Question 1

What are the 3 types of graphics files

Answer 1

Bitmap - grid of pixels (raster images in rows)
Vector graphics - mathematical instructions that define lines curves, text, ovals and other geometric objects
Metafile graphics - combo of bit map and vector graphics

Question 2

What is the Raw file format for graphics files

Answer 2

The raw format is used on many digital cameras. A camera performs no enhancements on the data coming from the sensors. This maintains the best picture quality, but is specific to the camera manufacturer and an algorithm is needed to convert it to standard formats such as JPEG.

Question 3

What is the Exif format?

Answer 3

Most digital cameras store graphics files as Exif JPEG files. It contains metadata such as information about the camera such as model make and serial number and settings. And GPS data if the camera has it.

Question 4

Name 2 forms of steganography

Answer 4

insertion (places data from the secret file into the host file)
substitution - replaces bits of the host file with other bits of data

Question 5

What are some issues with steganography and copyright?

Answer 5

-Steganography can be used to insert digital watermarks into a file to be able to determine its origin.

Question 6

Name 5 items of interest that may be stored on a mobile phone

Answer 6

call logs
SMS, MMS
e-mail
Instant messaging logs
web pages
pictures, videos and music files
calendars and address books
social media account information
GPS data
Voice recordings and voicemail

Question 7

What format do phones typically store data in?

Answer 7

Electronically erasable programmable read only memory
(EEPROM)
OS is stored in non-volatile Read Only Memory

Question 8

What is a SIM card and in what type of phones are they found?

Answer 8

GSM phones

Subscriber identity module (SIM)

Question 9

What purpose do SIM cards serve?

Answer 9

It is necessary for the phone to work
It identifies the subscriber to the network
Stores service related information
can be used to back up the device

Question 10

What steps do you take in acquiring a mobile phone?

Answer 10

If the phone is off, leave it off but plug it in to a charger ASAP. Then do a static acquisition, then switch on.
If it is connected to a computer, disconnect it.
To guard against attacks, switch off or put it into flight mode/faraday cage

Question 11

When you are back in the lab, where should you look for information in a mobile forensics examination?

Answer 11

Internal memory
SIM card (SIM Reader)
Removable or external memory cards
Network provider