Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 5 : Defeating Anti-forensics Techniques
Questions available : 49		You are not logged in. Please Login for track your learning progress

Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
		Go to Question No.

Question No 0

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 322
Which part of Metasploit framework helps users to hide the data related to a previously deleted file or currently unused by the allocated file.
A:    RuneFS
B:    Slacker
C:    FragFS
D:    Waffen FS
Explanation: Data Hiding in File System Structures • Slacker — Hides data in slack space • FragFS — Hides in NTFS Master File Table • RuneFS — Stores data in “bad blocks” • KY FS — Stores data in directories • Data Mule FS — Stores in inode reserved space • Host Protected Areas & Device Configuration Overlay