Digital Forensics

from "Guide to Computer Forensics and Investigations" textbook 5th edition

Question 1 (30 POINTS) The purpose of this question is to learn how to locate date and time stamps in an MFT record by using a hexadecimal editor. Do the Hands-On Project 5-2 at p. 244 of the textbook. Write a short report about your execution, such as whether you encountered any problems and how you solved them, how long did it take you to complete this exercise, and anything else you want to include. Question 2. (30 POINTS) This is a continuation of the textbook Ch5 exercise about the OSForensics tool investigation of the image file provided by the Superior Bicycle employee Denise Robinson. Do the Hands-On Project 5-4 at p. 249 of the textbook. Write a short report about your execution, such as whether you encountered any problems and how you solved them, how long did it take you to complete this exercise, and anything else you want to include. List any available passwords and associated e-mail account names found in the InCh05 img image file Question 1 (30 POINTS) The purpose of this question is to learn how to locate date and time stamps in an MFT record by using a hexadecimal editor. Do the Hands-On Project 5-2 at p. 244 of the textbook. Write a short report about your execution, such as whether you encountered any problems and how you solved them, how long did it take you to complete this exercise, and anything else you want to include. Question 2. (30 POINTS) This is a continuation of the textbook Ch5 exercise about the OSForensics tool investigation of the image file provided by the Superior Bicycle employee Denise Robinson. Do the Hands-On Project 5-4 at p. 249 of the textbook. Write a short report about your execution, such as whether you encountered any problems and how you solved them, how long did it take you to complete this exercise, and anything else you want to include. List any available passwords and associated e-mail account names found in the InCh05 img image file