mid‐StudyGuide - LPouliot/Soph-Spring-FOR-100-Digital-Forensics GitHub Wiki
Study Guide
MCQs Part:
Make sure you have a good understanding of:
-
What cybercrime is and the different types of crimes out there
-
What is social engineering and how it is being used today
-
The different kind of cyber laws
-
A chain of custody and how important to maintain it's integrity
-
The 4th Amendment
-
Different types of hacking activity, tools used, exploits, and how to countermeasure them
Examples:
- Scanning Connect Scan and SYN Scan
- Remote and Local Exploits
- AVs and Firewalls
-
What encryption is, public/private keys and how they are used today
-
Data representation and how data is represented on computers, plus the different kind of numbering systems used
Decimal, Binary, HexLinks to an external site., OctalLinks to an external site.
-
Why do we need Unicode today and how is it represented
-
How to convert between binary and hex, binary and decimal, binary and octal, or the opposite
Example:
- What is the hex, decimal and octal for: 101000011011
- What is the binary, decimal, and octal for: 45A
- What is the binary, hex, and octal for: 2233
-
- Signed numbers
Example:
- Convert -105 to binary
- Convert -1046 to binary
- Different kinds of documents, metadata and how to identify the type of file
Hands-on part:
How to work with a hex editor and use it to identify files
Using a hex editor to locate headers and trailers for different kinds of files
How to identify files even if the header/trailer is missing