Digital forensics

Question 1

What is metadata?

Answer 1

-Data about other data
e.g:
-Structures
-Locations
-Data elements
-What happens to the file after creation

Question 2

What information can photos provide when downloaded?

Answer 2

-Time
-Date
-Location
-Coordinates
of the photo taken

Question 3

What is a IMEI?

Answer 3

-15 digits long
-Printed on sticker under the battery that can be removed
-Determines make and model of the device

Question 4

What is the forensic interest in web browsers?

Answer 4

-Interested in where the user has viewed rather than what browser they have used
-How the browser stores information about the user

Question 5

What are the computer shutdown procedures?

Answer 5

-Must photograph the screen
-Note any running programs
-Pull the plug from the rear of the computer

Question 6

How are computers stored as evidence?

Answer 6

-Must be bagged and tagged like any other piece of evidence
-Bag and tag the image taken from the suspects computer
-Label and photograph all cables
-Anti-static bags used

Question 7

What information must be included when bagging and tagging computers?

Answer 7

-Location
-Date and time
-Case
-Event
-Examiner