NEW
Font size
WorksheetsCTF 101 - Forensics
Total questions: 11
Worksheet time: 6mins
What are File Signatures also known as?
Where someone signs off on a file they created.
A signature line you have to sign off on in order to be able to read a file.
Password protection on a file.
File Magic Numbers
What are file signatures used for?
To find out who created a file.
To find hidden messages in a file.
File signature analysis is used to identify the format (file type) of the file. Programs need to know the file type in order to open it properly.
To put hidden messages in a file.
What is Metadata?
It is the date a file was created.
It is the program the file was created on.
Data about Metahumans.
Data about data.
What kind of file Metadata is useful?
The file name.
Potentially, any file metadata you can find could be useful.
The name of the image.
The date the file was created.
How can you find Metadata in a file?
Ask the person who sent you the file.
Use the exiftool.
Use the google inspect tool.
Google the information on the internet.
What is Wireshark?
A how to guide on Shark fishing.
A hacker tool.
How to attach a wire leader to sharks.
Wireshark is a network protocol analyzer which is often used in CTF challenges to look at recorded network traffic.
What is Stenography?
Drawing of landscape pictures.
Stenography is the practice of hiding data in plain sight. Stenography is often embedded in images or audio.
The study of handwriting.
Copy and Pasting data.
What is Disk Imaging?
Taking a screenshot of the computers hard drive.
A forensic image is an electronic copy of a drive
Printing out the contents of a disk drive.
Copying a picture of your home screen.
What is Memory Forensics?
Learning how to memorize data.
Reading someone's mind to determine if they committed a crime.
Interviewing suspects of a crime.
Traces of someone's activity on a computer by dumping the memory.
What is a Hex Editor used for?
Used to select colors in a image.
A editor used to change characteristics of a Dinosaur.
A hexadecimal (hex) editor (also called a binary file editor or byte editor) is a computer program you can use to manipulate the fundamental binary data that constitutes a computer file.
A comic book editor.
What is the definition of Forensics (digital)?
Calling the CSI team to track down criminals.
The art of recovering the digital trail left on a computer.
Preparing for a crime scene investigation.
Gathering evidence.
