An attacker after performing an attack decided to wipe evidences using artifact wiping techniques to evade forensic investigation. He applied magnetic field to the digital media device, resulting in…

The correct answer is B. Disk degaussing/destruction. The technique described, where an attacker applies a magnetic field to a digital media device to clean it of any previously stored data, is known as disk degaussing. Degaussing is a method used to erase a disk or tape by exposing it to a strong magnetic field, destroying the…

Computer Forensics in Incident Handling

Question

An attacker after performing an attack decided to wipe evidences using artifact wiping techniques to evade forensic investigation. He applied magnetic field to the digital media device, resulting in an entirely clean device of any previously stored data. Identify the artifact wiping technique used by the attacker.

Options

AFile wiping utilities
BDisk degaussing/destruction
CDisk cleaning utilities
DSyscall proxying

How the community answered

(19 responses)

B
89% (17)
C
5% (1)
D
5% (1)

Explanation

The technique described, where an attacker applies a magnetic field to a digital media device to clean it of any previously stored data, is known as disk degaussing. Degaussing is a method used to erase a disk or tape by exposing it to a strong magnetic field, destroying the magnetic data storage mechanism and leaving the device clean of any data. This process is effectively used for wiping digital evidence in a way that makes recovery impossible, serving as a method of anti- forensics. Unlike file wiping utilities or disk cleaning utilities, which overwrite or delete data (potentially leaving traces that can be recovered), degaussing physically alters the storage medium itself, making data recovery unfeasible.

Topics

#artifact wiping#disk degaussing#anti-forensics#evidence destruction

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice