Week 7 Project – Examination & Reporting
Using FTK Imager
1. Download and extract the latest version of FTK Imager Lite from http://accessdata.com/support/adownloads. (*Note: You may have already done this in a previous project; if so, jump to step 2).
After clicking “Download,” fill out the marketing questionnaire and click “Download Now” (your real info is not necessary).
Choose to save the file to your Desktop.
Right-click the saved .ZIP file and extract the FTK Imager Lite to your Desktop.
2. Access the resulting FTK Imager Lite directory. Right-click (or hold the SHIFT key and right-click) the “FTK Imager.exe” executable and choose “Run as Administrator.” FTK Imager should start.
3. Click the “Add Evidence Item” button and choose “Contents of a Folder” from the resulting “Select Source” dialogue box.
4. Use the Browse button to select your “Documents” or “My Documents” directory.
When you click finish, your Documents folder should be added in to the FTK Imager interface.
5. Examine your files and analyze/report according to the project requirements.
Using Mac OS X
1. Piece of cake… Simply click your “Finder” and click on your “Documents” folder and explore away, and analyze/report according to the project requirements.