Question: Part 1 : Identify Additional Evidence of Data Exfiltration ( 0 / 1 completed ) you may have missed something. You suspect it is possible
Part : Identify Additional Evidence of Data Exfiltration completed
you may have missed something. You suspect it is possible that Marvin may have also used email to send smaller files directly to Dr Evil. To put your mind at ease, you decide to take one last look at Marvin's drive image, this time beginning your search with the attachments stored within Marvin's Outlook account.
Using Autopsy's Email parser, sort the data in Marvin's Outlook database and then review the sorted messages to identify additional files that were exfiltrated via email.
Make a screen capture showing an exfiltrated file in Marvin's Outlook database.
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
