Study Guide and Actual Answers.
Key role of internet in terrorism - Answer Propaganda: Spreads extremist ideologies globally
via social media and websites.
Recruitment: Attracts and radicalizes individuals through targeted content.
Coordination: Enables secure communication for planning attacks.
Training: Provides online tutorials for weapons, explosives, and cyber tactics.
Fundraising: Facilitates anonymous funding via cryptocurrency and crowdfunding.
Endianess - Answer Little Endian: Stores the least significant byte first (e.g., 0x12345678 as 78
56 34 12).
Big Endian: Stores the most significant byte first (e.g., 0x12345678 as 12 34 56 78).
Conversion: Required for communication between systems with different endianness.
Key factors in fifth amendment - Answer Compulsion: Protects individuals from being forced to
provide evidence against themselves.
Incrimination: Guards against self-incriminating statements that could lead to criminal liability.
Testimonials: Applies to verbal or communicative evidence, not physical evidence or
documents.
Radical far right group - Answer Radical far-right groups are typically characterized by
extremist ideologies that emphasize ultranationalism, authoritarianism, racial or ethnic
supremacy, and opposition to diversity, democracy, or perceived liberal values.
Reconstruction of evidence in digital forensics - Answer Reconstruction of evidence in digital
forensics involves reassembling and interpreting digital data to understand events or activities
related to a cybercrime. Key components include:
Data Recovery: Restoring deleted, corrupted, or hidden files.
Timeline Analysis: Sequencing events using timestamps and logs.
System Functionality Analysis: Understanding how a system or program operated during the
incident.
Network Traffic Analysis: Examining communication patterns and connections.
File and Metadata Examination: Analyzing document properties, file headers, and modification
, Correlating Evidence: Linking recovered data across devices or networks for a comprehensive
picture.
Cyber-terrorism VS Hacktivism - Answer Objective
Cyber-terrorism: Instills fear, causes harm, and disrupts critical systems.
Hacktivism: Promotes political, social, or ethical causes.
Motivation
Cyber-terrorism: Driven by political, ideological, or religious extremism.
Hacktivism: Motivated by advocacy, protest, or raising awareness.
Methods Used
Cyber-terrorism: Employs destructive attacks like DDoS or infrastructure sabotage.
Hacktivism: Focuses on defacing websites, leaking data, or disrupting services.
Targets
Cyber-terrorism: Targets governments, critical infrastructure, or civilians.
Hacktivism: Targets corporations, governments, or institutions opposing their cause.
Corpus deliciti evidence - Answer establishes that a crime has been committed
18 U.S.C. § 1028(a)(7) and 18 U.S.C. § 1028A - Answer 18 U.S.C. § 1028(a)(7): Prohibits using
another's identification to commit unlawful acts or fraud.
18 U.S.C. § 1028A: Adds a mandatory two-year sentence for using someone else's identity
during certain felonies.
Digital stratigraphy in forensic analysis - Answer Digital Stratigraphy in forensic analysis refers
to the study of the chronological layering of digital artifacts, much like geological stratigraphy
examines layers of earth. It helps investigators reconstruct a timeline of events by analyzing the
creation, modification, and access times of files and digital evidence. Key aspects include:
Timestamp Analysis: Examining metadata to determine when files were created, modified, or
accessed.
Event Correlation: Identifying sequences of actions across different systems or devices.
File System Hierarchy: Understanding the organization of files and directories to reveal patterns.
Artifact Context: Layering artifacts based on their origin (e.g., logs, cache files, or system files) to
establish a comprehensive timeline.