BadGuy Bob hid files in the slack space, changed the file headers, hid suspicious files in executables, and changed the metadata for all types of files on his hacker laptop. What has he committed?

The correct answer is A. Anti-forensics. Anti-forensics refers to techniques used to hinder the forensic analysis of a computer system. By hiding files in slack space, changing file headers, embedding suspicious files in executables, and altering metadata, BadGuy Bob is attempting to make it difficult for forensic…

Computer Forensics in Incident Handling

Question

Options

AAnti-forensics
BAdversarial mechanics
CFelony
DLegal hostility

How the community answered

(43 responses)

A
88% (38)
B
7% (3)
C
2% (1)
D
2% (1)

Explanation

Anti-forensics refers to techniques used to hinder the forensic analysis of a computer system. By hiding files in slack space, changing file headers, embedding suspicious files in executables, and altering metadata, BadGuy Bob is attempting to make it difficult for forensic analysts to find, analyze, and attribute the malicious activities and data on his laptop. These actions are designed to conceal evidence, manipulate digital artifacts, and obstruct investigations, making them clear examples of anti-forensic techniques. While such actions could be part of broader criminal activities, constituting a felony, and could be seen as adversarial mechanics or legal hostility in specific contexts, the most accurate classification of these techniques is anti-forensics.

Topics

#anti-forensics#file hiding#metadata manipulation#evidence tampering

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice