MEDIA AND STORAGE

REVIEW SESSION
Arron Martin Zeus Brown
Learning outcomes

 We will review the work so far

 ACW informal feedback
 Course feedback sheet
 Types of device
 Some examples

 Best uses for

 Magnetic storage.
 MO drive storage.

 Solid state storage.

 Optical storage.
 Magnetic read and write head
Shields poles

Coils
MR Reading Inductive Writing
Head head
MR
Sensor
 Label

Aluminium
Phase
change
Darken = 0 compound
Leave translucent =1 Dielectric
layers

Polycarbonate Plastic

Write
Erasing
Writing
Erase data
CD
data
1. USB connector
2. USB mass storage controller
device
3. Test points
4. Flash memory chip
5. Crystal oscillator
6. LED
7. Write-protect switch
8. Space for second flash
memory chip

Internals of a typical flash drive

(Saitek brand USB1.1 pictured)
Common uses
 System administration
 Computer repair
 Application carriers
 To boot OS
 Windows vista ReadyBoost
 Personal data transport
 Audio players
 Music storage
 In arcades
Interface types
 IDE
 EIDE
 UDMA
 ATA
 ATAPI
 SCSI
 Firewire
 USB
 Parallel
 Serial
 Binary
 Hex
 Octal

 Convert the following to each of the above

(starting in base 10)
 10
 34
 6
 16
Converting Rules
 Octal blocks of 3
 Hex block of 4

 Some examples to convert

 111111111111

 101011010101

 101010101
 Forensic issues
 Explain what LZ adaptive dictionary-
based algorithm is
 Digitization
 Explain what it is
Compression and
Encryption
 Explain what they are
 When you might use them
 Last week (the pop quiz)
 What did you learn
What next
 Looking at what we will be doing after X-mass
 File systems
 Ms filesystems
 Unix filesystems
 Other file systems
 Partitioning (tools and partition types)
 File allocation tables
 Free space
 Swap space
 Slack space
 Data deletion and recovery
 Forensic tools
Introducing your ACW2

“Class meet ACW2

ACW2 meet class”
Recovery imaging and analysis
 report writing
 note taking

 forensic skills
Things you might come across

 Identifying the crime scene

evidence
 Labelling and continuity (notes)
 Imaging
 Forensic tool kits (why that one)
 It will be in the form of several piece
of work
Visual check
 What needs to be done?
 Following will be 4 scenes
 You will need to observer and assess the scene
One
Two
Three
Four
Four
Review
 What have you found
 Order of preference to deal with
One
Two
Three
Four