File System - Digital Forensics

123456789101112131415161718
Across
  1. 4. Unique number assigned to each file by Sleuth Kit.
  2. 5. The smallest addressable unit on a disk.
  3. 7. A forensic tool that lets you peek inside disk images.
  4. 8. Sleuth Kit tool that lists files and directories.
  5. 9. Each file or folder has one of these in the directory.
  6. 11. Tool used to inspect metadata of a file using its i-node.
  7. 14. Status of a file when its first byte becomes 0xE5.
  8. 16. Command-line tool that can copy and extract raw data.
  9. 17. Not the computer – it’s the trio of file times: Modified, Accessed, Created.
Down
  1. 1. A tiny unit of data that packs a punch in file metadata.
  2. 2. The top-level directory in a file system.
  3. 3. The filename used in the example image (hint: it ends in .JPG).
  4. 4. Tool that extracts file content using i-node number.
  5. 6. The starting point in a disk image where the file system begins.
  6. 8. A file system that’s not on a diet but still stores your files.
  7. 10. Created, Modified, Accessed – the holy trinity of file times.
  8. 12. The leftover space in a cluster where secrets might hide.
  9. 13. The language of 0x20, 0xE5, and other mysterious codes.
  10. 15. The order in which bytes are read – big or little, choose wisely!
  11. 18. A group of sectors that files love to hang out in.