Chapter 20 - 02 - Understand Digital Evidence - 02_ocred_fax_ocred.pdf
Document Details
Uploaded by barrejamesteacher
null
OCR
Tags
Related
- Chapter 20 - 01 - Understand the Fundamentals of Computer Forensics - 01_ocred_fax_ocred.pdf
- Chapter 20 - 02 - Understand Digital Evidence - 01_ocred_fax_ocred.pdf
- Chapter 20 - 02 - Understand Digital Evidence - 03_ocred_fax_ocred.pdf
- Chapter 20 - 06 - Digital Evidence Sources to Support Forensic Investigation - 01_ocred_fax_ocred.pdf
- Chapter 20 - 06 - Digital Evidence Sources to Support Forensic Investigation - 03_ocred_fax_ocred.pdf
- Chapter 20 - 07 - Collecting the Evidence - 01_ocred_fax_ocred.pdf
Full Transcript
Certified Cybersecurity Technician Exam 212-82 Computer Forensics Sources of Potential Evidence...
Certified Cybersecurity Technician Exam 212-82 Computer Forensics Sources of Potential Evidence Computer-Created User-Created Files User-Protected Files Files == Address books Address books -= Compressed cOmpressed files files =. Backup files Backup files = Database files. )! * Log Log files = Misnamed Misnamed files = Media (images, graphics, = Configuration files audio, video, etc.) files = Encrypted files * Encrypted files = Printer spool files *= Documents (text, = Password-protected files = Cookies spreadsheet, presentation, etc.) files =® Swap files *= Hidden Hidd en files files Swapflles =* Internet bookmarks, = System files favorites, etc. = Steganography Steganography = History files Temporary files Sources of Potential Evidence (Cont’d) Bt oo "text/" href="my:c - 1/ Hard Drive Text, picture, video, multimedia, database, and computer program files
