Question: Summary Section 1 - Create a Case with Autopsy - FAT32 Image In this lab we will process forensic images that we created in the
Summary Section 1 - Create a Case with Autopsy - FAT32 Image In this lab we will process forensic images that we created in the previous labs and see how data from our images are seen in a forensic software tool. We will also validate FTK Imager's hashing by obtaining MD5 & SHA1 hashes created by Autopsy with the FTK Imager hashing logs. When processing a forensic image, it is important to validate that the hashes obtained during imaging matches that hashing records of the forensic software tool. This also includes post exam hashing to verify the integrity of the data after an exam. Section 2 - Create a Case with Autopsy - NTFS Image 1. Using the instructions from Section 1, follow the same processes creating a case in Autopsy with your NTFS Image. Add the below to Section 2 of your Student Report
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
