please see attached
How to get started:
Review Lecture 5 – report writing guidelines
Review the assignment and expectations
Make sure FTK and Imager (the versions that are posted on Blackboard) or Autopsy (https://www.sleuthkit.org/autopsy/) are installed
Download project image and hash values from blackboard
Open the image with FTK Imager – verify it to make sure the hash values match what was given
Open the image in FTK/Autopsy to start your analysis
Document each step!!
Hints/reminders for the project:
Your report should document each step in your analysis and explain what you did, what you found, how, where, what the technical aspects mean
Don’t interpret the file content – that is out of the scope of your job!
You can’t say a specific person did something – make sure you differentiate between PEOPLE and USERNAMES
Stick to the facts
Write in first person
Include LOTS of screenshots – but these go in the appendix, not the body of your report!
Don’t forget to include the basics in your report – who are you? Your authority? What case is this? Background?
Need help?
HELP! Folder on blackboard
Labs 2 and 3
Lecture 5, 6, and 7
Ask!