In this project, you use ProDiscover Basic to locate and extract JPEG files with altered extensions. Some of these files are embedded in files with non-JPEG extensions. Find the C08frag.dd file in your work folder, and then follow these steps:

1. Start ProDiscover Basic (with the Run as administrator option, if necessary) and begin a new project. In the New Project dialog box, type C08frag in the Project Number and Project File Name text boxes, and then click OK. 2. In the tree view, click to expand Add, and then click Image File. In the Open dialog box, navigate to your work folder and click C08frag.dd. Click Open, and then click Yes, if necessary, in the Auto Image Checksum message box.

3. Click the Search toolbar button. In the Search dialog box, click the Content Search tab, if necessary. Under Search for the pattern(s), type JFIF, and under Select the Disk(s)/Image(s) you want to search in, click C:nWorknC08frag.dd. Click OK.

4. Click each file in the work areas search results that doesnt have a .jpg extension, and in the data area, scroll through and examine the entire con- tent of each file to find any occurrences of a JFIF label. Click the check box next to each file with a JFIF label. When the Add Comment dialog box opens, type Recovered hidden .jpg file, click the Apply to all items check box, and then click OK.

5. In the tree view, click Report, and then click File, Print Report from the menu. Click OK. You can also save your report by clicking the Export toolbar button, and in the Export dialog boxs File Name text box, type C08Prj01. Click Browse, navigate to your work folder, click Save, and then click OK.

6. Exit ProDiscover Basic, saving your project when prompted.