How digital forensics can be important to an investigation? What are the challenges faced in mobile forensics? What information Linux logs provide? On a suspect Linux based computer, a file was found...

• How digital forensics can be important to an investigation?

• What are the challenges faced in mobile forensics?

• What information Linux logs provide?

• On a suspect Linux based computer, a file was found in /var/spool/cron with the following content:

15 20 * * 0-1,4 rm -rf ~/.cache/thumbnails/* Interpret that file.

• Before starting an investigation on a Mac, digital forensic expert should know which version of Mac is working with. How to check this?

• By analyzing the
  HDD\Users\USERNAME\Library\Application Support\Google\Chrome\Default
  directory on a suspect’s computer, what evidence an investigator can collect?

• Where can a forensic expert find the following on a Mac computer?

a- Sites that the suspects visited frequently from Safari. b- Information on the last session browsed with Safari. c- Mail messages exchanged with Apple Email.

d- Information regarding the Bluetooth. e- Log Files

• The layout of disk partitions present a particular interest to the forensic examiner. Briefly list some ways in which disks can hide information and detail just one way.

• Contrast the difference between contiguous allocation and chained allocation schemes.

• A feature, offered by most Web browsers, is the possibility to navigate the internet anonymously by deleting surfing data upon quitting the browser. Categorize such a technique in terms of digital forensics.