Computer Forensics Review Flashcards

These flashcards cover key vocabulary and concepts from the Computer Forensics lecture notes.

Computer Forensics

The preservation, acquisition, extraction, and interpretation of computer data.

Hardware

The physical and tangible components of a computer.

Software

A set of instructions compiled into a program that performs a specific task.

Read-Only Memory (ROM)

A type of memory that stores firmware used to start the boot process.

Random Access Memory (RAM)

Volatile memory that temporarily stores data needed at a moment's notice.

Central Processing Unit (CPU)

The main processing unit of a computer, often referred to as the processor.

Hard Disk Drive (HDD)

The primary location of data storage within a computer.

Visible Data

Data that the operating system is aware of and easily accessible to the user.

Latent Data

Data of which the operating system is not aware, often left behind after deletion or other processes.

File Allocation Table (FAT)

A table that keeps track of the location of files and folders on an HDD.

Master File Table (MFT)

A component of the NTFS partition that keeps track of filesystem data.

Partitioning

The process of dividing an HDD into separate sections for data management.

Swap Space

An area on the hard drive used to conserve RAM by temporarily holding data.

Evidence Types

Can be categorized into visible or latent data.

Internet Cache

A temporary storage area for frequently accessed web data.

IP Address

A unique address assigned to each computer on a network, generally in the form ###.###.###.###.

Forensic Image Acquisition

The process of obtaining a copy of data from a storage device without altering it.

Computer Fingerprint

A unique alphanumeric string generated to verify the integrity of data on a drive.

Firewall

A network security device designed to monitor and control incoming and outgoing network traffic.