and Forensics questions with accurate answers
arp Ans✓✓✓Utility for viewing and modifying the local Address
Resolution Protocol (ARP) cache on a given host or server
autopsy Ans✓✓✓A digital forensics platform and graphical interface to
the Sleuth Kit and other digital forensic tools
Browser Exploitation Framework (BeEF) Ans✓✓✓A tool that can hook
one or more browsers and can use them as a beachhead of launching
various direct commands and further attacks against the system from
within the browser context
Cain and Abel Ans✓✓✓A password recovery tool that can be used
through sniffing the network, cracking encrypted passwords using
dictionary, brute-force, and cryptanalysis attacks, recording VoIP
conversations, decoding scrambled passwords, revealing password
boxes, and analyzing routing protocols
cat (concatenate) Ans✓✓✓A command-line utility for outputting the
contents of a file to the screen
chmod Ans✓✓✓A command-line utility used to change the access
permissions of file system objects
, cuckoo Ans✓✓✓An open source software for automating analysis of
suspicious files
curl Ans✓✓✓A command line tool to transfer data to or from a server,
using any of the supported protocols (HTTP, FTP, IMAP, POP3, SCP,
SFTP, SMTP, TFTP, TELNET, LDAP or FILE)
data acquisition Ans✓✓✓The method and tools used to create a
forensically sound copy of data from a source device, such as system
memory or a hard disk
dd Ans✓✓✓A command line utility used to copy disk images using bit
by bit copying process
dnsenum Ans✓✓✓Utility that is used for DNS enumeration to locate all
DNS servers and DNS entries for a given organization
During which incident response phase is the preservation of evidence
performed? Ans✓✓✓Containment, eradication, and recovery
FTK Imager Ans✓✓✓A data preview and imaging tool that lets you
quickly assess electronic evidence to determine if further analysis with a
forensic tool is needed
grep Ans✓✓✓A command-line utility for searching plain-text data sets
for lines that match a regular expression or pattern