mid‐StudyGuide - LPouliot/Soph-Spring-FOR-100-Digital-Forensics GitHub Wiki

Study Guide

MCQs Part:

Make sure you have a good understanding of:

  1. What cybercrime is and the different types of crimes out there

  2. What is social engineering and how it is being used today

  3. The different kind of cyber laws

  4. A chain of custody and how important to maintain it's integrity

  5. The 4th Amendment

  6. Different types of hacking activity, tools used, exploits, and how to countermeasure them

Examples:

  • Scanning Connect Scan and SYN Scan
  • Remote and Local Exploits
  • AVs and Firewalls
  1. What encryption is, public/private keys and how they are used today

  2. Data representation and how data is represented on computers, plus the different kind of numbering systems used

Decimal, Binary, HexLinks to an external site., OctalLinks to an external site.

  1. Why do we need Unicode today and how is it represented

  2. How to convert between binary and hex, binary and decimal, binary and octal, or the opposite

Example:

  • What is the hex, decimal and octal for: 101000011011
  • What is the binary, decimal, and octal for: 45A
  • What is the binary, hex, and octal for: 2233
    1. Signed numbers

Example:

  • Convert -105 to binary
  • Convert -1046 to binary
  1. Different kinds of documents, metadata and how to identify the type of file

Hands-on part:

How to work with a hex editor and use it to identify files

Using a hex editor to locate headers and trailers for different kinds of files

How to identify files even if the header/trailer is missing