Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

Write a 3 - 4 page paper ( 1 2 font size, double - spaced ) that is formatted according to APA standards. Prepare the

Write a 3-4 page paper (12 font size, double-spaced) that is formatted according to APA standards. Prepare the paper for a reader who has little or no knowledge of the Windows Registry. Include definitions and explanations of terms that are likely to be unfamiliar.
In your paper, address the following topics:
A general overview of the Windows Registry and its five high-level keys including:
Descriptions of the ways that data is categorized within the registry
Examples of how data is stored and what's necessary to decipher it
At least one screenshot depicting high-level keys
In-depth research of the HKEY_Current_User Hive:
Detailed description of the hive
User and machine data that is stored within the hive
How data is stored
How data can be viewed within the hive
Specific examples of forensically relevant data
How the Hive can be connected to an individual
Three tools that can be used to analyze the Registry to include:
Description of the tools, their developers, and availability
Functions of the tools
How tools report data
Specific examples from the Windows registry where relevant and possible
Screenshots to support explanations of tools
Relevance to forensic examinations
A plan for analyzing the registry of a computer from the scenario shown below:
Forensic tool/s that you would use for the registry analysis and reason for selecting this tool
Specific description of data to be analyzed (i.e. file name) and how you would collect that data
One piece of data from each of the five high-level keys that you would examine and how that data could assist with the investigation
Scenario
Police responded to a call, at 7521 River Parkway, in which Arnold Harding was found, deceased from an apparent gunshot wound, at his place of business, Harding Enterprises, a small printing company. The business was owned by the decedent and his wife, Lillian Harding. The company employs two full-time employees and one part-time intern. Officer Greene was the first responder and did a cursory check of the scene. She saw two computers at the location, a Windows desktop machine, powered on and a laptop. The two machines are connected by a small network in the office. There is a cell phone, an iPhone 8, powered on, near the body of the decedent. The owner of the phone has not been identified. Detective Justin Martin was called to the scene. He will take charge of the investigation.

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started