Question
Can I get help with this lab please? Lab 05 Exploring a FAT Image Using the hex editor of your choice, explore the image provided
Can I get help with this lab please?
Lab 05 Exploring a FAT Image
Using the hex editor of your choice, explore the image provided and try to locate evidence of contraband pictures. in this case, the contraband pictures are in the form of pictures of weasels.
Using the Image Lab05.E01:
Found at: https://drive.google.com/open?id=1P0Oe44gfa-1m3rEsfC64hmmQv3ZEQ-ly
Find the root directory and take a screenshot.
Are there deleted files in the root directory? How do you know they are deleted?
For the deleted files, find the FAT and see if you can determine what clusters are storing the remnants of the files. Take screenshot of the FAT, and circle the cluster numbers of at least one deleted file.
Using a search for JFIF, see if you can locate any of the deleted images in the file system. Take a screenshot.
Search for any textual information in the image that might indicate that the pictures are there on purpose and not by accident. Again, take a screenshot.
Now, using FTK Imager, open the image as a physical drive and explore the FAT and see if you can verify the information that you discovered using the hex editor. Take a screenshot.
Can you see any deleted pictures?
Right click on the file and export them to your file system.
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started