From 77a3976fb70ebd2197e0cb661d795db0eebc5565 Mon Sep 17 00:00:00 2001 From: Jan Vales Date: Sat, 21 Jun 2014 04:18:34 +0200 Subject: [PATCH] typo correction. --- report4/content.tex | 20 +++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/report4/content.tex b/report4/content.tex index e1850cc..1bdede4 100644 --- a/report4/content.tex +++ b/report4/content.tex @@ -22,6 +22,8 @@ \hline \end{tabularx}\end{center} +Some inconsistencies between the phones' data could hint at one or both parties owning one more device that was not analyzed. + \subsection{What information was exchanged between Mr. Smith and Mr. Mayer? (3 points)} Mayer shared a folder called called \emph{\textbf{confidential}} with Smith over Dropbox.\\ @@ -209,7 +211,7 @@ The plist \emph{\textbf{IPBA::SystemPreferencesDomain:SystemConfiguration/com.ap \subsection{Media} Images were extracted from \emph{\textbf{IPBA::CameraRollDomain:Media/DCIM/100APPLE}}\\ -IMG\_0002.PNG: Screenshot of Facebook-App showING a photograph of a woman. Laura Markovic (\url{https://www.facebook.com/laura.markovic.129}) seems to be tagged in that photograph. +IMG\_0002.PNG: Screenshot of Facebook-App showing a photograph of a woman. Laura Markovic (\url{https://www.facebook.com/laura.markovic.129}) seems to be tagged in that photograph. \begin{quote} \textbf{size}: 844814 byte\\ \textbf{''file''-output}: PNG image data640 960 8-bit/color RGB, non-interlaced\\ @@ -272,20 +274,20 @@ The content was: \hline 2012-11-27 12:20:00 & from & johannes.m.smith & Johannes Smith & Hallo! Ich wüurde Sie gerne in meine Skype-Kontaktliste aufnehmen. Johannes Smith\\ \hline 2012-12-06 13:20:33 & to & johannes.m.smith & Johannes Smith & \\ \hline 2012-12-06 13:20:57 & to & christoffel.johannes.smith & Chris Smith & Fügen Sie mich als Kontakt hinzu, damit wir anrufen und chatten können\\ - \hline 2012-12-06 13:21:33 & to & addy-juli & Julia & Fügen Sie mich als Kontakthinzu, damit wir anrufen und chatten können.\\ + \hline 2012-12-06 13:21:33 & to & addy-juli & Julia & Fügen Sie mich als Kontakt hinzu, damit wir anrufen und chatten können.\\ \hline 2012-12-06 16:33:51 & from & johannes.m.smith & Johannes Smith & Hallo\\ \hline \end{tabularx}\end{center} \subsection{Dropbox-App} -The plist \emph{\textbf{IPBA::AppDomain:com.getdropbox.Dropbox/Library/Preferences/com.getdropbox.Dropbox.plist}} opened with IPBA2 plist-viewer cointains a field \emph{\textbf{Dropbox Username}} and the email-address \emph{\textbf{allegro.mayer\@gmail.com}}\\ +The plist \emph{\textbf{IPBA::AppDomain:com.getdropbox.Dropbox/Library/Preferences/com.getdropbox.Dropbox.plist}} opened with IPBA2 plist-viewer cointains a field \emph{\textbf{Dropbox Username}} and the email-address \emph{\textbf{allegro.mayer@gmail.com}}\\ Also the field \emph{\textbf{Dropbox Camera Upload Has Ever Uploaded}} is \emph{\textbf{true}}\\ \subsection{Facebook-App} -The plist \emph{\textbf{IPBA::AppDomain:com.facebook.Facebook/com.facebook.Facebook.plist}} opened with IPBA2 plist-viewer cointains a field \emph{\textbf{FBLastLoginEmail}} and the email-address \emph{\textbf{allegro.mayer\@gmail.com}}\\ +The plist \emph{\textbf{IPBA::AppDomain:com.facebook.Facebook/com.facebook.Facebook.plist}} opened with IPBA2 plist-viewer cointains a field \emph{\textbf{FBLastLoginEmail}} and the email-address \emph{\textbf{allegro.mayer@gmail.com}}\\ Searching of FB reveales the link to the profile: \url{https://www.facebook.com/allegro.mayer}.\\ That About-Page states his relationship status is married to Mrs. Ilse Mayer-Brandl (profile: \url{https://www.facebook.com/ilse.mayerbrandl}).\\ @@ -304,7 +306,7 @@ On December 7. 2012 14:17 at Paris, with Laura Markovic (\url{https://www.facebo \newpage\section{Android} \subsection{Source: Android.tar.gz (ANDRO)} -Android image from Johannes Maskus Smith's phone. +Android image from Johannes Markus Smith's phone. \begin{quote} \textbf{size}: 270397822 byte\\ \textbf{''file''-output}: gzip compressed data, last modified: Fri Dec 14 12:06:37 2012, from Unix\\ @@ -337,7 +339,7 @@ The content was: \hline \end{tabular}\end{center} -It looks suspicious that 2 diffrent People share the same Number. Maybe the tables became corrupt? +It looks suspicious that 2 different people share the same number. Maybe the tables became corrupt? \subsection{Call-Log} @@ -523,7 +525,7 @@ The content was: \subsection{WLANs} -The file \emph{\textbf{ANDRO::data/misc/wifi/wpa\_supplicant.conf}} whows an interesting network configuration. +The file \emph{\textbf{ANDRO::data/misc/wifi/wpa\_supplicant.conf}} shows an interesting network configuration. \begin{quote} \textbf{size}: 126 byte\\ \textbf{''file''-output}: ASCII text\\ @@ -533,7 +535,7 @@ b6d745f0daabb44f922efded0c1b7c93698b43545dbf465608807bc22b779787} \end{quote} \begin{lstlisting} -trl_interface=eth0 +ctrl_interface=eth0 update_config=1 network={ @@ -586,6 +588,6 @@ Tools that were used for analysis (-{}-version): Windows XP Version5.1 (Build2600.xpsp\_sp3\_qfe.130704-0421 : Service Pack3) \item \textbf{Oracle VirtualBox} 4.3.10 \item \textbf{Host machine}\\ -Linux rebx 3.14.0-gentoo-somenet.org \#1 SMP Sun Apr 6 01:00:17 CEST 2014 x86\_64 Intel(R) Core(TM)2 Duo CPU T9300 \@ 2.50GHz GenuineIntel GNU/Linux +Linux rebx 3.14.0-gentoo-somenet.org \#1 SMP Sun Apr 6 01:00:17 CEST 2014 x86\_64 Intel(R) Core(TM)2 Duo CPU T9300 @ 2.50GHz GenuineIntel GNU/Linux \end{itemize} -- 2.43.0