Question: Part 1 : Identify Additional Evidence of Data Exfiltration ( 0 / 1 completed ) you may have missed something. You suspect it is possible

Part 1: Identify Additional Evidence of Data Exfiltration (0/1 completed)
you may have missed something. You suspect it is possible that Marvin may have also used email to send smaller files directly to Dr. Evil. To put your mind at ease, you decide to take one last look at Marvin's drive image, this time beginning your search with the attachments stored within Marvin's Outlook account.
Using Autopsy's E-mail parser, sort the data in Marvin's Outlook database and then review the sorted messages to identify additional files that were exfiltrated via email.
Make a screen capture showing an exfiltrated file in Marvin's Outlook database.
Part 1 : Identify Additional Evidence of Data

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!