Answers
Outlook - CORRECT ANSWER .pst
Offline Outlook Storage - CORRECT ANSWER .ost
Outlook Express - CORRECT ANSWER .mbx
Outlook Express - CORRECT ANSWER .dbx
Eudora - CORRECT ANSWER .mbx
SSD - CORRECT ANSWER Which storage tech uses NAND?
Autopsy and Sleuth Kit - CORRECT ANSWER What uses AFF file format?
FTK - CORRECT ANSWER Which tool makes a bit-by-bit copy of a windows 8
phone?
XRY - CORRECT ANSWER What is used to unlock iphone?
simrestore - CORRECT ANSWER What is Data Doctor?
, hash - CORRECT ANSWER How does windows store pw?
/.Trashes/501 - CORRECT ANSWER Where do deleted Apple iphone/ipad files go?
This utility allows you to unlock a locked iPod Touch - CORRECT ANSWER Pwnage
Security log - CORRECT ANSWER This is probably the most important log from a
forensics point of view. It has both successful and unsuccessful login events.
C:\Users\username\Documents - CORRECT ANSWER This is a very important
directory to look at for evidence.
SAM (Security Accounts Manager) file - CORRECT ANSWER Where will Windows
store the hash_______in the Windows system directory
Payload - CORRECT ANSWER _____is the information to be hidden
Carrier - CORRECT ANSWER The _____is the signal, stream, or file in which the
payload is hidden.
Channel - CORRECT ANSWER The _____is the type of medium used. This may be a
passive channel, such as photos, video, or sound files, or even an active channel,
such as a Voice over IP (VoIP) voice call or streaming video connection.