Your client has requested for a review of certain information related to one of their employees: Jean. They

would like to see what information you can gather through a review of her user profile and corresponding

registry hive. They have already reviewed the Operating System clusters and would like you to focus

exclusively on the NTUSER.DAT file for Jean.

They have specific, targeted questions they would like you to answer by providing the location,

screenshots, and description of the data which addresses each question.

They would like you to provide a forensic report of your methodology and analysis on by answering the

following questions:

$1.$ What software was made available to Jean$$s user account?

$2.$ Was AOL Instant Messenger $($AIM$)$ installed and used? If so$,$ answer the following:

a$.$ When was it last used?

b$.$ What user accounts are associated with the account?

c$.$ Is a password stored? What is known about the password?

d$.$ What other pertinent information is available regarding AIM?

$3.$ What URLs has Jean visited using Internet Explorer?

$4.$ Are there other Internet browsers present or used?

$5.$ Is there anything else they examiner finds noteworthy?