What is the file extension used for Autopsy case files. This is important to know, should you need to transfer the case folder from one computer to another and you need to open the case file. (letters only) Blank 1 Blank 1 Add your answer
Added by James A.
Close
Step 1
zip". Show more…
Show all steps
Your feedback will help us improve your experience
Akash M and 52 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
The case in this project involves a suspicious death. Joshua Zarkan found his girlfriend's dead body in her apartment and reported it. The first responding law enforcement officer seized a USB drive. A crime scene evidence technician skilled in data acquisition made an image of the USB drive with FTK Imager and named it C1Prj01.E01. Following the acquisition, the technician transported and secured the USB drive and placed it in a secure evidence locker at the police station. You have received the image file from the detective assigned to this case. He directs you to examine it and identify any evidentiary artifacts that might relate to this case. To process this case, follow these steps to evaluate what's on the image of the USB drive: 1. Start Autopsy for Windows, and click the Create New Case icon. In the New Case Information window, enter C1Prj01 in the Case Name text box, and click Browse next to the Base Directory text box. Navigate to and click your work folder, and then click Next.
Akash M.
In this project, you will create a file on a USB drive and calculate its hash value in FTK Imager Lite. Then you will change the file and calculate the hash value again to compare the files. You will need a Windows computer and a USB drive. 1. Create a folder called C4Prj04 on your USB drive, and then start Notepad. 2. In a new text file, type "This is a test of hash values." One definition of a forensic hash is that if the file changes, the hash value changes. 3. Save the file as "hash1.txt" in the C4Prj04 folder on your USB drive, and then exit Notepad. 4. Start FTK Imager Lite (clicking OK or Yes in the UAC message box, if necessary), and click "File" > "Add Evidence Item" from the menu. In the "Select Source" dialog box, click the "Logical Drive" option button, and then click "Next." 5. In the "Select Drive" dialog box, click the "Source Drive Selection" list arrow, click to select your USB drive, and then click "Finish." 6. In the upper-left pane, click to expand the USB drive and continue expanding until you can click the C4Prj04 folder. In the upper-right pane, you should see the "hash1.txt" file you created. 7. Right-click the file and click "Export File Hash List." Save the file as "original hash" in the C4Prj04 folder on your USB drive. FTK Imager Lite saves it as a .csv file. Exit FTK Imager Lite, and start Notepad. 8. Open "hash1.txt" in Notepad. Add one letter to the end of the file, save it, and exit Notepad. 9. Start FTK Imager Lite again. Repeat Steps 4 to 7 (but without starting Notepad), but this time when you export the file hash list, save the file as "changed hash." 10. Open the "original hash" and "changed hash" files on your USB drive in Excel or another spreadsheet program. Compare the hash values in both files to see whether they're different, and then exit Excel and FTK Imager Lite.
You must encrypt files with any of these extensions: .csv, .doc, .docm, .docx, .imp, .ftm, .ftx, .gdoc, .jng, .pdf, .png, .rtf, .sav, .tiff, .wps, .xlsx A.txt B.docx C.bmp D.xlsx E.pub F.pptx Which file(s) do you need to encrypt? Select all that apply.
Mauya M.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
18,000,000+
Students on Numerade
Trusted by students at 8,000+ universities
Watch the video solution with this free unlock.
EMAIL
PASSWORD