(SEM VI) THEORY EXAMINATION 2024-25 CYBER FORENSIC ANALYTICS

Cyber Forensic Analytics (BCAI061)

Section-Wise Important Questions & Study Notes

SECTION A

(Attempt all questions | 2 × 7 = 14 marks)
Write short, crisp answers (2–3 lines each). No examples unless asked.

(a) Cybercrime & Types

Cybercrime refers to illegal activities carried out using computers, networks, or the internet.
Common types include hacking, phishing, identity theft, cyber stalking, and online fraud.

(b) Cyber Stalking vs Cyber Extortion

(c) Disk Imaging in Cyber Forensics

Disk imaging is the process of creating an exact bit-by-bit copy of a storage device to preserve digital evidence without altering the original data.

(d) Role of Audit Logs in Investigation

Audit logs record system activities, user actions, logins, file access, and are used to trace events, detect misuse, and establish timelines.

(e) Warranted vs Warrantless Searches

(f) Pre-Search Activities in Digital Evidence Management

Includes legal authorization, case briefing, tool preparation, risk assessment, documentation planning, and ensuring chain of custody.

(g) Key Components of Indian Cyber Law (Any Three)

Information Technology Act, 2000                         Cyber Appellate Tribunal

Digital signatures & electronic records                  Cybercrime penalties

SECTION B

(Attempt any THREE | 7 × 3 = 21 marks)
Answers should be descriptive, use headings + examples.

(a) Types of Cybercrime with Real-World Examples

Hacking – Unauthorized system access        Phishing – Fake emails/websites stealing credentials

Cyber Fraud – Online financial scams           Identity Theft – Misuse of personal data

Cyber Terrorism – Attacks on critical infrastructure

(b) Wireshark & PCAP Analysis in Forensics

Wireshark captures and analyzes network traffic packets (PCAP files) to detect suspicious activity, malware communication, data exfiltration, and intrusion attempts.

(c) Cybercriminal Profiling

Cybercriminal profiling analyzes behavior patterns, tools used, attack style, language, and targets to identify attacker type (insider, hacker group, script kiddie).

(d) Evidence Collection Process & Legal Importance

Steps:

Identification                            Preservation

Collection                                 Examination

Documentation

Importance: ensures admissibility of evidence in court and maintains integrity.

(e) Legal Frameworks in India to Combat Cybercrime

IT Act, 2000

Indian Penal Code (IPC sections)         CERT-In guidelines

Cyber Crime Cells                                Digital Evidence Rules

SECTION C

(Attempt any ONE | 7 marks)

(a) Cyber Terrorism & Cyber Warfare

Cyber Terrorism involves politically motivated cyber-attacks causing fear or damage.
Cyber Warfare is state-sponsored digital attacks targeting national infrastructure, defense systems, and communication networks.

OR

(b) Mobile Payments & Their Exploitation

Mobile payments use apps like UPI, wallets, and banking apps.
Exploitation methods:                                  Phishing links

Fake payment requests                                Malware apps

SIM swapping