Session 11 Review Amzb

MEDIA AND STORAGE REVIEW SESSION

Arron Martin Zeus Brown

Learning outcomes

  

We will review the work so far ACW informal feedback Course feedback sheet



Types of device  Some



examples

Best uses for  Magnetic

storage.  MO drive storage.  Solid state storage.  Optical storage.



Magnetic read and write head poles

Shields

Coils MR Reading Head MR Sensor

Inductive Writing head

Label Aluminium Phase change compound

Darken = 0 Leave translucent =1

Polycarbonate Plastic

Write Erasing Writing Erase data CD data

Dielectric layers

1. 2. 3. 4. 5. 6. 7. 8.

USB connector USB mass storage controller device Test points Flash memory chip Crystal oscillator LED Write-protect switch Space for second flash memory chip

Internals of a typical flash drive (Saitek brand USB1.1 pictured)

Common uses         

System administration Computer repair Application carriers To boot OS Windows vista ReadyBoost Personal data transport Audio players Music storage In arcades

Interface types          

IDE EIDE UDMA ATA ATAPI SCSI Firewire USB Parallel Serial

  



   

Binary Hex Octal Convert the following to each of the above (starting in base 10) 10 34 6 16

Converting Rules  

Octal blocks of 3 Hex block of 4  Some

examples to convert  111111111111  101011010101  101010101



Forensic issues



Explain what LZ adaptive dictionarybased algorithm is



Digitization  Explain

what it is

Compression and Encryption  

Explain what they are When you might use them

 

Last week (the pop quiz) What did you learn

What next 

Looking at what we will be doing after X-mass 

File systems 

Ms filesystems



Unix filesystems



Other file systems



Partitioning (tools and partition types)



File allocation tables



Free space



Swap space



Slack space



Data deletion and recovery



Forensic tools

Introducing your ACW2 “Class meet ACW2 ACW2 meet class” Recovery imaging and analysis report writing  note taking  forensic skills 

Things you might come across



   

Identifying the crime scene evidence Labelling and continuity (notes) Imaging Forensic tool kits (why that one) It will be in the form of several piece of work

Visual check 

What needs to be done?  Following  You

will be 4 scenes

will need to observer and assess the scene

One

Two

Three

Four

Four

Review 

What have you found  Order

of preference to deal with

One

Two

Three

Four