Forensics

Question 1

dd

Answer 1

• A command line utility used to copy disk images using a bit by bit copying process

Question 2

FTK Imager

Answer 2

• a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with a forensic tool is needed
• Tool for creating forensic images of computer data

Question 3

Memdump

Answer 3

• A command line utility used to dump system memory to the standard output stream by skipping over holes in memory maps

Question 4

WinHex

Answer 4

• A commercial disk editor and universal hexadecimal editor used for data recovery and digital forensics
• Multi-function disk and binary data editor used for low-level data processing, data recovery and digital forensics

Question 5

Autopsy

Answer 5

• A digital forensics platform and graphical interface to the Sleuth Kit and other digital forensics tools