Victim identification

Question 1

Explain why VIC ID is the most important part of LE?

Answer 1

Most important function as LE because it will result in identification of the victims and the suspects!

Question 2

What information is found using WHOIS?

Answer 2

Domain Name:
REgistrar information
Registrant information
Contact information
Registration dates
Registrar Abuse Contact

Question 3

Why is it important to avoid duplication work regarding VIC ID ?

Answer 3

Need to avoid duplication
* Wellbeing of staff
* Waste of time and energy
* Same material seen again and again
* Seeing new material quickly

Question 4

Name some global database with filehashes regarding CSAM?

Answer 4

CAID (UK Child abuse image db)
Project VIC
Interpols ICSE
NCMEC (USA)

Question 5

How is triage used for VIC ID?

Answer 5

Victim Identification
* Triage – based on victim
* Triage – based on offender
* Triage – based on background

Seen –v- Not Seen
Old -v- New
No possible clues –v- Possible Clues

Question 6

What are the ABC of vic id?

Answer 6

ABC of Victim ID
A.Content Analysis
B.Metadata Analysis
C.Collection Analysis

Question 7

What is lolita and why is this search term used by offenders?

Answer 7

The term “Lolita” is often associated with child sexual abuse and exploitation due to its cultural and literary references Due to the novel’s portrayal of a sexual relationship between an adult and a minor.

Question 8

Name some field that are important that can be found in exif?

Answer 8

GPS
Creationdate
Comments
Make and model
Software used
Email/Username/Nick
Codecs used

Question 9

How can files or collections be identified? without looking at the actual images

Answer 9

• Hashes!
• PhotoDNA – One image is broken down in many images and hashes each –Resizing alters hash, not DNA!
  Similiarities in EXIF