finish the task -- 2
Budget: $10 – $20 USD
We found a mysterious disk in the company. The first response team has created a forensic image of it.
You can download the disk image from the link: https://nau3203-my.sharepoint.com/:u:/g/personal/fpaligu_na_edu/ETOX82RvBJxOqp9WxlNpOnABOu85lh13X2-gcVeGwj-DqQ?e=6j3BZ4
Assignment II
Utilize Autopsy to investigate the disk
1-) Is there any files with extensions that doesn't match their actual file types ?
2-) What can we say about the authenticity of the images in this disk ? (Hint: you can use autopsy to check the files in their application view and obtain the strings from the files) ?
3-) Please add your new findings with screenshots of the process
You can download the disk image from the link: https://nau3203-my.sharepoint.com/:u:/g/personal/fpaligu_na_edu/ETOX82RvBJxOqp9WxlNpOnABOu85lh13X2-gcVeGwj-DqQ?e=6j3BZ4
Assignment II
Utilize Autopsy to investigate the disk
1-) Is there any files with extensions that doesn't match their actual file types ?
2-) What can we say about the authenticity of the images in this disk ? (Hint: you can use autopsy to check the files in their application view and obtain the strings from the files) ?
3-) Please add your new findings with screenshots of the process