week 26 - forensics: digital data Flashcards
1
Q
file signature ?
A
unique identifier - specifies what the data content on a file is
2
Q
MACE?
A
Modified, Accessed, Created, Entry Modified
3
Q
Exif?
A
Exchangeable Image File - standard that defines info about an image
4
Q
Physical image?
A
A physical image is a bit-for-bit replica of all the data contained on a digital device. Making a physical image will capture all live and deleted data.
5
Q
Logical image
A
A logical image contains all data that is visible to the file system of the device concerned. Deleted files and fragments will not normally be captured using this imaging method.