Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

Prodiscover basic download

06/01/2021 Client: saad24vbs Deadline: 12 Hours

Advanced Computer Forensics

Windows ProDiscover Forensics Lab

This lab is a replacement for the EnCase lab (122) for students who have been unable to access EnCase through RLES. In order to do this lab, you will need to download and install ProDiscover Basic (make sure to pick 32-bit or 64-bit depending on your version of Windows) from this URL: http://www.techpathways.com/desktopdefault.aspx?tabindex=8&tabid=14 (scroll down until you see the download links at the bottom of the page). You will also need to download a copy of the image files for this lab, 123img.zip. These image files are distributed under the GPL and were originally created by Brian Carrier.


Instructions appear as bullet points, questions are numbered and bolded.


Instructions & Questions

Start ProDiscover Basic.


Create a new project for this laboratory. Give it a unique number and name.


Click “Add” then “Image File” and add “123img1.dd”.


Click the “Action” menu then generate “OS Info”. This adds some information about the image to the report, which you can view at any time during your examination by clicking on “View” then “Report”.


What is the file system of this image file?


What is the volume name?


Go to “Cluster View” and click on the image.


How many clusters are used on this image file?


Go to “Content View” and click on the image.


List all the Deleted files recovered by ProDiscover in a table – and calculate the MD5 hash value for each deleted file.


Is there anything special about any of the files?


ProDiscover will use the time zone setting of your examiner workstation if no time zone is set for the evidence. When you acquire a computer as evidence it is important to make note of the computer’s time and time zone, especially if you need to correlate evidence from different time zones (never assume the time or time zone on a computer is correct.)


Where does the Time Zone information reside in a Windows system?


Set the timezone by clicking on File, then Preferences. The timezone should be US Central Time in this particular case (the image file has been extracted from a computer in that timezone although it is not an image of the system partition so there is no way to find the computer's actual timezone from the image itself).


What is the latest file creation time on the image?


Which files are resident files? Hint: you can right-click on a file and say “Show Cluster Numbers” to see the cluster/s in which the file is stored – you can do this for the $MFT of the disk image to see which clusters are allocated to the $MFT.


Add the second image to the case - “123img2.dd”


Go to the “Content View” and click “All Files”.


Go to the “View” menu and select “Gallery View”.


Which files display a thumbnail in Gallery View?


Are there any files with mismatching file extensions? If so, which ones? Identify their types according to their extension versus their actual type and explain how you have identified the actual type.


Disable Gallery View.


Extract all JPEG files from the image by selecting each of them. You will be prompted to add a comment about the file for the report. Record “JPEG file” and whether the file has been hidden, deleted, mislabelled or is in any other way special.


Right-click on a file and click “Copy All Selected Files”. Save them in a temporary directory on your computer.


Paste each JPEG file from your temporary directory into your submission document as an embedded image.


Do you think you have identified every JPEG file in the image? Hint: You can search for the JPEG file header by clicking on “Search”, selecting “Hex” and searching for the pattern FFD8. Do any files contain the pattern which do not appear in your temporary directory? If so, which ones?


Create a table for all files on the second image, listing each file's name and MD5 hash value.


Your answers to all questions should be stored in a LibreOffice document, Word document or PDF, and uploaded to Dropbox in the “EnCase Lab” folder as this exercise replaces the EnCase lab.

Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

University Coursework Help
Top Essay Tutor
Helping Hand
Writer Writer Name Offer Chat
University Coursework Help

ONLINE

University Coursework Help

Hi dear, I am ready to do your homework in a reasonable price.

$42 Chat With Writer
Top Essay Tutor

ONLINE

Top Essay Tutor

I have more than 12 years of experience in managing online classes, exams, and quizzes on different websites like; Connect, McGraw-Hill, and Blackboard. I always provide a guarantee to my clients for their grades.

$45 Chat With Writer
Helping Hand

ONLINE

Helping Hand

I am an Academic writer with 10 years of experience. As an Academic writer, my aim is to generate unique content without Plagiarism as per the client’s requirements.

$40 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Tell us about a person you admire? - Corneal biopsy of the right eye cpt code - Teacher aide course brisbane - Sir joseph hotung net worth - How is the word myth used in academic context - Advanced television systems committee - Brownie badge book pdf - English_Journal Assignments_week4 - Mechanical extraction of groundnut oil - Barclays bank case study - Real world situations paper - What word does jefferson use to describe rights - The william hogarth school - Times they are a changin - Ca c2h3o2 2 compound name - Vaccines should not be mandatory essay - 13.03 research plagiarism and academic integrity - Resolving forces in a truss - Why did kathy experience the altered sensation - Global leader development program bmw salary - Issues in psychological testing worksheet - Aveeno advertisement - How to cite aca code of ethics 2014 - Great expectations study guide chapters 1 10 answers - Qca schemes of work science ks3 - Rise and fall of toms shoes - Structural devices in literature - Shadow health focused exam chest pain brian foster - Marissa Jones Only!!!! - MGT 365 week 6 Discussion - post and response - Etsu minitab - Frequency response of rc and rl circuits - Macquarie university undergraduate fees - Case Study 2 - Controllability and observability matlab - The redistricting game worksheet answers - Client centered therapy ppt - How to include appendices in a report - American Government II Discussion - Qnt 275 week 4 practice set answers - Essay - The role of a change manager - Wk 5 – Signature Assignment: Personal Plan Paper - Newham resident parking permit - How to install mahout - Management assignment - Causes of conflict between nurses - Steal my kisses karaoke - Student exploration titration gizmo answer key activity c - What is a ballata in music - 1.10 geometric meanies answer key - Murdoch university preparation course - Stance essays on treating animals humanely - Discussion #25 - One fifty lashes dan murphy - Devops maturity assessment model - Shoes and sox size chart - Kish and leslie formula - Assignment - Managing Dynamic Environment - Discussion-History - The untimely death of professor hathaway - Prast v town of cottesloe - Words that start with od - Medication Errors Led to Disastrous Outcomes - Wamap math - Discussion (Chapter 6): - Webassign net calculus 2 answers - [Deliverable 4] Short Speaking Assignment #2: Transformational Moment - Health Assessment - Information management at homestyle hotels - Economic Assignment (2 days) - When does macduff become suspicious of macbeth - Fnb flexi fixed deposit - Board game project rubric - Habitable planet carbon lab answers - International fisher effect equation - Zipcar refining the business model case study analysis - WK9 10-19 - Mcgraw hill virtual lab punnett squares answer - Competency Modeling ands KSA's - due in 18 hours - Week 1 discussion - Environmental Sustainability - East calder health centre - The scarlet letter chapter 12 questions and answers - +91-8306951337 get your love back by vashikaran IN Erode - Cidr address overlaps with existing subnet cidr: 10.0.0.0/24. - Me talk pretty one day claim - Cipd level 7 employment law assignment examples - National ehealth strategy toolkit - The thinking cap tutoring service - The chain tobias wolff sparknotes - A zero wage increase again - Operational Planning - Econometrics - Statistics canada population pyramid - Three ancient arts of discourse - Using 360-degree feedback appraisals to trigger pay and personnel decisions puts ______ at risk. - How to enter domain in webassign - Ender's game chapter 5 summary