In this lab, you assumed the role of a forensic specialist investigating evidence associated with a drug trafficking case. While conducting your investigation with different digital forensics tools, you learned that certain FTK Imager functions can also be run from the command line. In the interest of expanding your own forensic toolkit, you have decided to learn more about this approach.

Using the Internet, research the command line version of FTK Imager and identify the command used to generate SHA$1$ and MD$5$ hashes for a specific file. Next, launch a Command Prompt window and navigate to the FTK Imager CMD tool $($C:$\backslash$Program Files$\backslash$AccessData$\backslash$FTK Imager$\backslash$cmd$\backslash ).$ Use the command you identified in your research to verify the SHA$1$ and MD$5$ hashes of the Evidence$\_$drive$1\mathrm{.}001$ file used in this lab.

In this lab, you assumed the role of a forensic specialist investigating evidence associated with a drug trafficking case. While conducting your investigation with different digital forensics tools, you learned that certain FTK Imager functions can also be run from the command line. In the interest of expanding your own forensic toolkit, you have decided to learn more about this approach.

Using the Internet, research the command line version of FTK Imager and identify the command used to generate SHA$1$ and MD$5$ hashes for a specific file. Next, launch a Command Prompt window and navigate to the FTK Imager CMD tool $($C:$\backslash$Program Files$\backslash$AccessData$\backslash$FTK Imager$\backslash$cmd$\backslash ).$ Use the command you identified in your research to verify the SHA$1$ and MD$5$ hashes of the Evidence$\_$drive$1\mathrm{.}001$ file used in this lab. Need help with that try this command ftkimager $--$verify C:$\backslash$Daubert Standard Evidence$\backslash$Image$1\backslash$Evidence$\_$drive$1\mathrm{.}001.$ also, ftkimager $--$verify C:$\backslash$Daubert Standard Evidence$\backslash$Image$1\backslash$Evidence$\_$drive$1\mathrm{.}001.$ it need screen capture showing the hash values for the Evidence Drive $1\mathrm{.}001.$ need help with that thanks.