Question

Digital Forensics

You are investigating a case of industrial espionage for a company called Superior Bicycles. A disk image was acquired from a suspected employee, Chris Murphy’s computer that was seized as part of the investigation. The disk is a Windows drive formatted in NTFS.

Your task is to collect digital evidences for the case. Once complete the investigation, write an Investigation Report that shall answer the following questions:

1)Is the image’s integrity is preserved?

2)What types of evidence (Photograph, Email, etc.) you have collected from the image?

3)Any evidence worthy to mention in your report that obviously is close related to the charge?

4)Any assumptions or restriction when perform the investigation

5)The complete process (steps in procedure) you applied during your investigation.

Note- The image file is from book " Guide to computer forensics and investigations" . image file is in dvd chapter-9

Answer 1

password: smoke
5964-thoughts July 2004.doc

password : fire
5968-thoughts May 2004.doc

password: art
6044-PRKs_world.doc

if you have any doubt then please ask me without any hesitation in the comment section below , if you like my answer then please thumbs up for the answer , before giving thumbs down please discuss the question it may possible that we may understand the question different way and we can edit and change the answers if you argue, thanks :)