General Instructions

$|$

$1.$Follow ethical guidelines and ensure no real$-$world data or systems are compromised.

$2.$Provide clear and concise documentation of all steps taken.

$3.$Use screenshots to support your findings and document key steps.

$4.$Submit all reports in PDF format, including an introduction,

methodology, findings, and conclusion.

$5.$Ensure all submitted work is your own and properly cite any references

or resources used.File Recovery and Analysis with Autopsy

$6.$ Refer the attached image for Question File Recovery and Analysis with Autopsy

Scenario: A company suspects that an employee has deleted crucial financial records from their work computer to cover up fraudulent activities.

Tasks:

$1.$Disk Image Creation: Create a disk image of the suspect's computer

hard drive using FTK Imager.

$2.$ File Recovery: Use Autopsy to analyze the disk image and recover

deleted files.

$3.$ Data Analysis: Identify and extract the financial records, analyzing

their content for any signs of tampering or fraud.

$4.$ Reporting: Generate a detailed report documenting the steps taken,files recovered, and findings from the analysis.

Tools Used: FTK Imager, Autopsy

Instructions:

$1.$Ensure proper documentation of each step.

$2.$Provide screenshots of key findings.

$3.$Submit a report in PDF format.