In this lab we will be examining artifacts from the evidence files we have examined during the semester and your own hard drive. This may take several examination steps. After you have loaded the evidence files and your hard drive to a new case, you need to process the evidence.

I want you to locate and do a screen capture of $5$ pieces of information that you think is significant. Understand that there is no wrong answer for the choices of what artifacts you examine. Look through the evidence file and examine them in text view, look at the signature analysis, and examine some data and the reports that are available.

Answer the following questions:

$1.$ Do you see any INFO$2$ files? If so do they have any data? Why do they or don$$t they? $($you can speculate$)$

$2.$ Examine some of the cookies you may find. What type of information can you see? Print out an example.

$3.$ Locate the recycle bin and see if you can examine items that may be in the bin or perhaps removed.

$4.$ Why do some of the URL$$s have a $$Bad signature$$ in the signature analysis column?