BA A61 021 10D D66 37C CEC C2F 495 531 C0
6 02 0D 66 37 E 2F 49 31 C0 A5
61 1021 10D 66 37C CEC C2F 495 531 C0A A52 2D6
3
C
4
10 0210 0D6 663 7CE EC2 2F4 953 31C 0A 52D D66 65B
7
9
5
A
2
0
6
1
F
D
02 10D 66 37 CE C2F 49 531 C0 A5 2D 665 5BA 61
10 6 37 CE C2 49 53 C A5 2D 66 BA 61 02
10 D6 637 CE C2 F49 53 1C 0A5 2D 66 5BA 61 02 10D
5
1
6
1 0
0D D66 37C CEC C2F F495 531 C0 A52 2D6 665 BA 610 021 0D 663
66 37C EC 2F 49 31 C0 A5 D6 65 BA 610 21 0D 663 7C
66 37C EC 2F 49 531 C0 A5 2D6 65 BA 610 21 0D 663 7C EC
5
A 2
2
B
0 6
63 37C EC 2F4 495 31C C0A 52 D66 65B A6 6102 210 D6 637 7CE EC2 F49
EC 2F 95 31 0 52 D6 5 A 10 1 D 63 C C F4 5
7
C
37 E 2 49 3 C0 A5 D 65 BA 61 21 0D 66 7C EC 2F 95 31
C C F4 5 1C A 2 6 B 6 0 0 6 37 E 2 4 3 C
CE EC2 2F4 953 31C 0A 52D D66 65B A6 102 210D D66 637 CE C2F F49 9531 1C0 0A5
C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F 49 531 C0 A5 2D
F4 953 1C 0A 52D 66 5B A6 102 10 6 37 CE C2 49 53 C0 A5 2D 665
95 1C 0A 52 6 5B A6 10 10 D6 637 CE C2 F4 53 1C A 2D 66 B
31 0 52 D6 65 A 10 21 D 63 C C F4 95 1C 0A 52 6 5B A6
C0 A5 D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A 52 D6 65 A 10
A5 2D 66 BA 61 02 0D 66 37C EC 2F 49 31 C0 5 D6 65 BA 610 21
2D 66 5BA 61 02 10D 66 37C EC 2F 49 531 C0 A5 2D 65 BA 61 21 0D
66 5B 61 02 10D 66 37 E 2F 49 531 C0 A5 2D 665 BA 61 021 0D 663
5B A6 02 10 6 37 CE C2 49 53 C A5 2D 66 BA 61 02 0D 66 7C
A6 10 10 D6 637 CE C2 F4 53 1C 0A 2D 66 5B 6 02 10D 66 37 E
10 210 D6 63 CE C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F
21 D 63 7C C F4 95 1C 0A 52 6 5B A6 10 10 6 37 CE C2 4
0D 66 7C EC 2F 95 31 0 52 D6 65 A 10 21 D 63 C C F4 95
66 37C EC 2F 49 31 C0 A5 D6 65 BA 610 21 0D 663 7C EC 2F4 95 31C
37 E 2 49 53 C0 A5 2D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A
CE C2 F4 53 1C A 2D 66 B 6 02 0D 66 37 E 2F 49 31 C0 5
C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F 49 531 C0 A5 2D
F4 953 1C 0A 52D 66 5B A6 102 10 6 37 CE C2 49 53 C0 A5 2D 665
95 1C 0A 52 6 5B A6 10 10 D6 637 CE C2 F4 53 1C A 2D 66 B
31 0 52 D6 65 A 10 21 D 63 C C F4 95 1C 0A 52 6 5B A6
C0 A5 D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A 52 D6 65 A 10
A5 2D 66 BA 61 02 0D 66 37C EC 2F 49 31 C0 5 D6 65 BA 610 21
2D 66 5BA 61 02 10D 66 37C EC 2F 49 531 C0 A5 2D 65 BA 61 21 0D
66 5B 61 02 10D 66 37 E 2F 49 531 C0 A5 2D 665 BA 61 021 0D 663
5B A6 02 10 6 37 CE C2 49 53 C A5 2D 66 BA 61 02 0D 66 7C
A6 10 10 D6 637 CE C2 F4 53 1C 0A 2D 66 5B 6 02 10D 66 37 E
10 210 D6 63 CE C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F
21 D 63 7C C F4 95 1C 0A 52 6 5B A6 10 10 6 37 CE C2 4
0D 66 7C EC 2F 95 31 0 52 D6 65 A 10 21 D 63 C C F4 95
66 37C EC 2F 49 31 C0 A5 D6 65 BA 610 21 0D 663 7C EC 2F4 95 31C
37 E 2 49 53 C0 A5 2D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A
CE C2 F4 53 1C A 2D 66 B 6 02 0D 66 37 E 2F 49 31 C0 5
C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F 49 531 C0 A5 2D
F4 953 1C 0A 52D 66 5B A6 102 10 6 37 CE C2 49 53 C0 A5 2D 665
95 1C 0A 52 6 5B A6 10 10 D6 637 CE C2 F4 53 1C A 2D 66 B
31 0 52 D6 65 A 10 21 D 63 C C F4 95 1C 0A 52 6 5B A6
C0 A5 D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A 52 D6 65 A 10
A5 2D 66 BA 61 02 0D 66 37C EC 2F 49 31 C0 5 D6 65 BA 610 21
2D 66 5BA 61 02 10D 66 37C EC 2F 49 531 C0 A5 2D 65 BA 61 21 0D
66 5B 61 02 10D 66 37 E 2F 49 531 C0 A5 2D 665 BA 61 021 0D 663
5B A6 02 10 6 37 CE C2 49 53 C A5 2D 66 BA 61 02 0D 66 7C
A6 10 10 D6 637 CE C2 F4 53 1C 0A 2D 66 5B 6 02 10D 66 37 E
10 210 D6 63 CE C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F
21 D 63 7C C F4 95 1C 0A 52 6 5B A6 10 10 6 37 CE C2 4
0D 66 7C EC 2F 95 31 0 52 D6 65 A 10 21 D 63 C C F4 95
66 37C EC 2F 49 31 C0 A5 D6 65 BA 610 21 0D 663 7C EC 2F4 95 31C
37 E 2 49 53 C0 A5 2D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A
CE C2 F4 53 1C A 2D 66 B 6 02 0D 66 37 E 2F 49 31 C0 5
C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 CE C2F 49 531 C0 A5 2D
F4 953 1C 0A 52D 66 5B A6 102 10 6 37 CE C2 49 53 C0 A5 2D 665
95 1C 0A 52 6 5B A6 10 10 D6 637 CE C2 F4 53 1C A 2D 66 B
31 0 52 D6 65 A 10 21 D 63 C C F4 95 1C 0A 52 6 5B A6
C0 A5 D 65 BA 61 21 0D 66 7C EC 2F 95 31 0A 52 D6 65 A 10
A5 2D 66 BA 61 02 0D 66 37C EC 2F 49 31 C0 5 D6 65 BA 610 2
2D 66 5BA 61 02 10D 66 37C EC 2F 49 531 C0 A5 2D 65 BA 61 21
66 5B 61 02 10D 66 37 E 2F 49 531 C0 A5 2D 665 BA 61 021 0
5B A6 02 10 6 37 CE C2 49 53 C A5 2D 66 BA 61 02 0D
A6 10 10 D6 637 CE C2 F4 53 1C 0A 2D 66 5B 6 02 10D
10 210 D6 63 CE C2 F4 953 1C 0A 52D 66 5B A6 102 10D 6
21 D 63 7C C F4 95 1C 0A 52 6 5B A6 10 10 6
0D 66 7C EC 2F 95 31 0 52 D6 65 A 10 21 D 63
66 37C EC 2F 49 31 C0 A5 D6 65 BA 610 21 0D 663
37 E 2 49 53 C0 A5 2D 65 BA 61 21 0D 66 7
CE C2 F4 53 1C A 2D 66 B 6 02 0D 66 37
C2 F4 953 1C 0A 52D 66 5B A6 102 10D 66 37 C
F4 953 1C 0A 52D 66 5B A6 102 10 6 37 CE
95 1C 0A 52 6 5B A6 10 10 D6 637 CE C
31 0 52 D6 65 A 10 21 D 63 C C
C0 A5 D 65 BA 61 21 0D 66 7C EC 2
A5 2D 66 BA 61 02 0D 66 37C EC 2F
2D 66 5BA 61 02 10D 66 37C EC 2F
66 5B 61 02 10D 66 37 E 2F 49
5 A
1
3 C C
Paper / Subject Code: 52704 / 4) Digital Forensic
(3 Hours)
1.
2.
3.
4.
5.
6.
(1) NTFS and FAT
57234
Total Marks: 80
N.B.: (1) Question No.1 is compulsory.
(2) Attempt any three questions from the remaining five questions.
(3) Make suitable assumptions wherever necessary but justify your assumptions.
(a) What is hacking? Who are the different types of hackers?
05
(b) What is incident and what are the goals of incident response?
05
(c) What volatile data can be obtained from investigation of routers?
05
(d) What are the challenges in evidence handling?
05
(a) Classify the different categories of cyber crime with examples of each. Identify the
10
type of cyber-crime for each of the following situations:
i) Hacking into a Web server and defacing legitimate Web pages
ii) Introducing viruses, worms, and other malicious code into a network or computer
iii) Unauthorized copying of copyrighted software, music, movies, art, books.
iv) Internet gambling and trafficking
(b) Briefly explain the role of the following tools in digital forensics: i) netstat
ii) psloggedon iii) tcptrace iv) netcat v) cryptcat
(2 ) CFAA , DMCA and CAN-SPAM
************
Page 1 of 1
52D665BA610210D6637CEC2F49531C0A
10
(a) Briefly explain the process of collecting the volatile data in Windows system. 10
(b) Briefly explain each of the following: Qualified forensic duplicate, restored image, 10
mirror image.
(a) Explain e-mail forensic investigation methods.
10
(b) Discuss the steps for investigating routers.
10
(a) Briefly explain the role of Windows registry in collecting forensic evidence.
10
(b) Explain guidelines for incident report writing. Give one report writing
example
10
Write a short note on:
20