Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

this information attached with the picture. Information for C:\\Documents and Se

ID: 3548894 • Letter: T

Question

this information attached with the picture.


Information for C:Documents and SettingspthomasDesktopHiding Info images 2013Case 10:

Image data size: 1911 MB

Sector count:    3913728

MD5 checksum:    96e3bac0db54e9ef939745f418a98f4f

SHA1 checksum:   0d73f8bfdab9d6d06eff7bd0abf8731c1559ba1a

Segment list:

  C:Documents and SettingspthomasDesktopHiding Info images 2013Case 10.E01


Image Source Information:

Drive Interface Type: USB

Drive Model: USB DISK 2.0 USB Device

[Drive Geometry]

  Bytes per Sector: 512

  Cylinders: 243

  Sectors per Track: 63

  Sector Count: 3,913,728

  Tracks per Cylinder: 255

Scenario An ex employee has been arrested on suspicion that he has been selling the credit card details of customers on the internet. There was no incriminating evidence at his flat, in his car or on his person. He did not appear to own a computer however a USB flash drive was found in his jacket pocket. Certain items of Information are known to be relevant to the case and these are detailed in the table below - ASSIGNMENT TASK Forensically analyse the image of the USB flash drive and identify whether any of the above evidence items can be found. SUMMARY OF DELIVERABLES Contemporaneous notes A report of the forensic analysis of the USB flash drive detailing the evidence items found, how the items were found and critical comment on the hiding techniques used.

Explanation / Answer

Use the extension words (Such as.jpg,.gif,.png Etc) in the search phrase to find the image files.., even if the folder is locked also it shows the image then take screen shot and tally the image