week 26 - forensics: digital data Flashcards

1
Q

file signature ?

A

unique identifier - specifies what the data content on a file is

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

MACE?

A

Modified, Accessed, Created, Entry Modified

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Exif?

A

Exchangeable Image File - standard that defines info about an image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Physical image?

A

A physical image is a bit-for-bit replica of all the data contained on a digital device. Making a physical image will capture all live and deleted data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Logical image

A

A logical image contains all data that is visible to the file system of the device concerned. Deleted files and fragments will not normally be captured using this imaging method.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly