- #Compare autopsy to prodiscover basic install
- #Compare autopsy to prodiscover basic zip
- #Compare autopsy to prodiscover basic windows
Click in the evidence tree to select drive C, directory catfiles, so that the files show up in the file list on the upper right. Add the wholedrive image file you made last week. Generate a report of your findings that describes the relationship between George and Laura and include that in your submission for this lab.įinding Zone.identifier streams using Autopsy. Do not include files that aren’t relevant to both George and Laura together. Examine the contents of the found files to see if they do reference George and Laura and if they do, check them off as files of interest with suitable comments about what is in the files you found. Use the Search item in the Prodiscover navigation tree to try finding files with the words George, Montgomery, Laura, or Roper in them. #Compare autopsy to prodiscover basic zip
Add the inChp02.eve image file extracted from InChp02.exe self-extracting zip file. An image file has been captured for us by a 3rd party. We are looking for evidence that will show whether they had an ongoing business relationship or not. In this investigation, there is an allegation that Laura Roper and George Montgomery worked together. Using Prodiscover for identifying evidence of transactions between George Montgomery and Laura Roper Include the report in your submission for this lab. Open the report by clicking on the file link and review it taking note of what the report contains, and what you would need to add to make it a complete forensic report. When you have examined all the pictures and tagged all the photos with Clint Eastwood in them, click Generate Report. If you find any, check the box next to the file with Clint Eastwood, and tag them as notable items. 
Use that ability to see if there are any pictures there of Clint Eastwood.
Clicking on a file in the file listing allows you to view a file. 
Use the evidence tree to view the filesystems found in the image, and explore them to see what files are in the image.Add the wholedrive image file from lab 1.
#Compare autopsy to prodiscover basic install
Download Autopsy and install it, then run it.We are attempting to ascertain whether he used the computer to get images of Clint Eastwood from the internet. In this investigation, we are continuing with our investigtion of Donald. Autopsy as a tool for identifying whether pictures of Clint Eastwood are on a suspect drive
#Compare autopsy to prodiscover basic windows
The purpose of this lab is to try using Windows tools to examine Microsoft filesystem images to see what you can recover. NETS1032 Lab 2 Examining Microsoft Filesystems
0 kommentar(er)
