Quiz Computer Forensic & Investigation Essay
Hanley Strappman, thirty seven, was learning about the pc and Digital Forensics program at Champlain College. Having been able to get hold of some files, which he put on a floppy disk. To disguise his lookout, he decided to smuggle the floppy back home after modifying the documents so that they couldn’t be examine using the normal DOS/Windows record manager.
Remember: This is just a sample from a fellow student. Your time is important. Let us write you an essay from scratch
His deception was discovered, nevertheless , and the floppy has been restored. Some of your counterparts have already tried to look at the disk with no success. Upon conversations with Hanley, he offers boasted that we now have three data files on the hard disk drive but that “You’ll hardly ever know what I acquired! ” You are becoming provided with a forensically authentic and appropriate copy of Hanley’s floppy disk. You are asked to examine the floppy hard disk drive and provide answers to a few inquiries about the integrity in the data that was retrieved (in terms of maintaining the evidentiary chain), the recovery of certain information, and any kind of actions the suspect may possibly have taken to intentionally erase, hide and alter data on the floppy disk.
Good Luck! Using the submission software tool provided for you in class, examine the disk and conduct a complete analysis of any artifacts found on the mass media. The following concerns must be designed in the time allocated: The Queries 1 . Precisely what is the name and talk about of the person to whom Hanley wrote a letter?
Doctor John Watson 8295 Martha Lane Mis Alamitos, FLORIDA 90720 installment payments on your Who is in the picture that Hanley attained? Lewis Carroll, Edith, Lorina and Alice Lidell 3. What is the information that Hanley supplied in a password-protected contact form? A file named “curriculum” in Microsoft Excel format. some. What are what they are called of the files on the floppy?
Each was hidden or perhaps obscured in another way; indicate how you will found the files and just how you reclaimed the information. The file identity is cc_stuff. exe Change the format to the. zip file format and enter the password to get the information your five. Where would you find the password? By using PRTK computer software, inside the proof image with the pwd
