CASP+: Chapter 12 File Carving and Binary Analysis Tools Quiz

Which tool is a Linux-based forensic data recovery utility that uses file carving techniques to extract deleted or corrupted data from a disk partition?

• readelf

• foremost

• strings

• hexdump

Which command line utility is used to extract text strings used within a binary file?

• objdump

• Ghidra

• hexdump

• strings

Which tool is written in Java and shares many features with the IDA Pro tool, intended for reverse engineering tasks?

• GDB

• OllyDbg

• Ghidra

• readelf

Which debugger tool is focused on Microsoft Windows and includes a graphical user interface?

• GDB

• OllyDbg

• strace

• ldd

Which utility can be used to identify interactions between processes and the Linux kernel?

• objdump

• strings

• file

• strace

Which command displays the type of a file by inspecting its content?

• file

• strings

• readelf

• hexdump

Which tool can be used to analyze object files and includes a disassembler to reveal the assembler commands used by the program?

• foremost

• strace

• objdump

• GDB

Which utility can be used to display a program's dependencies?

• hexdump

• ldd

• strings

• file

Which tool can be used to extract data from binary files and display the contents in hexadecimal, decimal, octal, or ASCII formats?

• Ghidra

• hexdump

• readelf

• OllyDbg

Which tool can be used to identify what is occurring within an application while it is running?

• file

• ldd

• strings

• GDB