Answers
Outlook - CORRECT ANSWER .pst
Offline Outlook Storage - CORRECT ANSWER .ost
Outlook Express - CORRECT ANSWER .mbx
Outlook Express - CORRECT ANSWER .dbx
Eudora - CORRECT ANSWER .mbx
SSD - CORRECT ANSWER Which storage tech uses NAND?
Autopsy and Sleuth Kit - CORRECT ANSWER What uses AFF file
format?
FTK - CORRECT ANSWER Which tool makes a bit-by-bit copy of a
windows 8 phone?
XRY - CORRECT ANSWER What is used to unlock iphone?
simrestore - CORRECT ANSWER What is Data Doctor?
, hash - CORRECT ANSWER How does windows store pw?
/.Trashes/501 - CORRECT ANSWER Where do deleted Apple
iphone/ipad files go?
This utility allows you to unlock a locked iPod Touch - CORRECT
ANSWER Pwnage
Security log - CORRECT ANSWER This is probably the most
important log from a forensics point of view. It has both successful
and unsuccessful login events.
C:\Users\username\Documents - CORRECT ANSWER This is a very
important directory to look at for evidence.
SAM (Security Accounts Manager) file - CORRECT ANSWER Where
will Windows store the hash_______in the Windows system
directory
Payload - CORRECT ANSWER _____is the information to be hidden
Carrier - CORRECT ANSWER The _____is the signal, stream, or file
in which the payload is hidden.
Channel - CORRECT ANSWER The _____is the type of medium
used. This may be a passive channel, such as photos, video, or