GASF GIAC Advanced Smartphone Forensics Questions and Answers

Cellebrite Physical Analyzer uses Bit Defender to scan for malware by flagging files who have known bad hash values. This is an example of which type of mobile malware detection?

Examine the file, Bluetooth, what is the name of the device being examined?

What is the extension used for BlackBerry 10 backup files?

Review the information contained within the Viber application running on an Android device. Which of the

following can be determined?

During the forensic analysis of a Nokia Symbian phone, you receive a SD card with files in the Nokia\Content

Copier folder. What data is present to examine?

The files pictured below from a BlackBerry OS10 file system have a unique file extension.

What can be concluded about these files?

Analyze the two tables (Albums and Photos) provided from the Facebook database on an Android device

located at the path: /data/data/com.facebook.katana/databases/fb.db.

Which photo was added to Facebook by the user of the device?

While conducting forensic analysis of an associated media card, one would most often expect to find this particular file system format?