Across
- 4. Unique number assigned to each file by Sleuth Kit.
- 5. The smallest addressable unit on a disk.
- 7. A forensic tool that lets you peek inside disk images.
- 8. Sleuth Kit tool that lists files and directories.
- 9. Each file or folder has one of these in the directory.
- 11. Tool used to inspect metadata of a file using its i-node.
- 14. Status of a file when its first byte becomes 0xE5.
- 16. Command-line tool that can copy and extract raw data.
- 17. Not the computer – it’s the trio of file times: Modified, Accessed, Created.
Down
- 1. A tiny unit of data that packs a punch in file metadata.
- 2. The top-level directory in a file system.
- 3. The filename used in the example image (hint: it ends in .JPG).
- 4. Tool that extracts file content using i-node number.
- 6. The starting point in a disk image where the file system begins.
- 8. A file system that’s not on a diet but still stores your files.
- 10. Created, Modified, Accessed – the holy trinity of file times.
- 12. The leftover space in a cluster where secrets might hide.
- 13. The language of 0x20, 0xE5, and other mysterious codes.
- 15. The order in which bytes are read – big or little, choose wisely!
- 18. A group of sectors that files love to hang out in.