Digital Forensics: Cyber Crime and Web Security Applied Scenarios

FACT Digital Forensics paper applied-scenario drill on cyber crime and web security, calibrated at the medium band where distractors are near-neighbour sister concepts and the student must match each fact pattern to the correct statute or technique. The set distinguishes Section 66, 66B, 66C, 66D, 66E, and 66F of the Information Technology Act 2000 against specific scenarios, separates phishing variants from spear phishing and whaling through tailoring and targeting cues, classifies ransomware families across WannaCry, LockBit, Conti, and the NotPetya wiper from their behavioural signatures, and applies malware taxonomy to operational evidence such as command-and-control beacons and SMB scanning. Web-security questions cover SQL injection sub-types (UNION-based, blind time-based, error-based), the three cross-site scripting variants (stored, reflected, DOM-based) from code snippets, email authentication results under SPF (RFC 7208), DKIM (RFC 6376), and DMARC (RFC 7489), and the same-origin policy, Content Security Policy directives, and TLS handshake reasoning at the transport layer. The cyberstalking and cyberbullying boundary is mapped to Section 354D of the Indian Penal Code 1860 and the carried-forward Section 78 of the Bharatiya Nyaya Sanhita 2023 effective from 1 July 2024.

For FACT aspirants and MSc digital forensics students working through cyber crime and information security modules at the applied level, and useful as a calibration drill before NFSU MSc entrance, GCFA, CHFI, and OSCP-track examinations. Questions emphasise statute mapping to fact patterns, sub-type distinction across malware and web-attack families, and protocol reasoning grounded in the IT Act 2000 with its 2008 amendment and the carried-forward BNS 2023 provisions.

Topics covered:

• IT Act sections 66, 66B, 66C, 66D, 66E, 66F applied to scenarios
• Phishing variants: spear phishing, whaling, vishing, smishing kill chains
• Ransomware families: WannaCry, LockBit, Conti, NotPetya behavioural identification
• Malware taxonomy: Trojan downloader, worm with C2, remote-access Trojan
• Spoofing chain: ARP, DNS, and email spoofing layered together
• SQL injection sub-types: UNION-based, blind time-based, error-based
• Cross-site scripting variants: stored, reflected, DOM-based from snippets
• Email authentication: SPF, DKIM, DMARC result evaluation
• Same-origin policy, CORS, Content Security Policy, TLS handshake reasoning
• Cyberstalking under Section 354D IPC 1860 and Section 78 BNS 2023

Useful for revision and self-testing before the FACT Digital Forensics paper.

Allow 30 minutes.