Answered step by step
Verified Expert Solution
Question
1 Approved Answer
Can you please help with the last step ( number 1 0 ) in writing a lab report? Module 5 Lab Part 2 OSForensics Password
Can you please help with the last step number in writing a lab report?
Module Lab Part OSForensics Password Recovery
Start OSForensics, if prompted to allow program to make changes to your computer, click YES. In the OSForensics message box, click Continue Using the Trial Version.
The Mount Drive Image button will need to be added to the left navigation pane. To accomplish this, select the Customize Workflow button which is located to the left in the navigation pane. You may need to click the down arrow at the bottom of the pane to see more items. From the Customize Workflow menu, check the Mount Drive Image option, under the Workflow menu column. Click OK This will place the Mount Drive Image option into the left navigation pane.
Select the Mount Drive Image in the left navigation window, you may need to use the updown arrows to find the item. This will present the Mount Virtual Disk window. Click Mount New button and provide path to image. The drive image named InCh is located on your DesktopLab DataModule folder. Once you select it click open, click next, click next again, then mount, and finally click exit.
Click the Manage Case button in the navigation bar on the left. From the Manage Case window, select new case. Provide a Case name. Click OK This returns the Manage Case window.Under Add to Case, Select device. Click image file and provide path to image using the same path as you did in step above. Click Ok This will return you to the Manage Case window.
In the navigation bar on the left, click Passwords. In the pane on the right, click the Password and Keys tab. Click Scan button. Your image file should be listed in the drive to be scan area Select items and click add to case. Provide a descriptive name such as Passwords & Keys and click OK
Now select the Window logins password tab. Click Scan button. Your image file should be listed in the drive to be scan area Select items and do a right click and select add list of all results to case. Provide a descriptive name such as Windows Login Passwords and click OK
Now select User Activity from the left navigation pane. From the User activity window, select scan. Take a screenshot of the results and include them in your report for the lab.
In the navigation bar on the left, click Manage Case. In the Manage Case pane on the right, click generate report button. Leave the selected defaults in place and click OK When you get the window to view in Edge, click OK
From the report window, under the Evidence Artifacts section, select loginsPasswords which will present two items on the right. Select each of these items and take a screenshot of the results. You will have two screenshots from the report
Exit OSForensics.Turn in the screenshots from steps and and submit them with your lab report.
I have to screenshots. thanks
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started