Part 1: Examine the Practical Suspicious Email.txt File
You are an investigator at a major U.S.-based bank, and one of your
duties is to monitor outgoing employee emails. The main objective of
this monitoring effort is to catch any customer data (such as a Social
Security Number [123-45-6789] or email addresses) being removed, which
is against company policy.
During your monitoring operations, you find an employee that appears
to be emailing a large book, and you decide to give this file further
inspection. However, the book appears to be over 48,000 lines of text,
and you cannot read each line.
Complete the following steps:
- Choose a tool to inspect the above-mentioned file and explain why you chose the particular tool.
- Create literal or regular expression searches to look for interesting data.
- Show the results of your interesting findings, and recommend further searches on other data based on your results.
Submit all of your searches, the results (even if the search did not
yield interesting results), and how you tested to ensure your search was
formed or formatted correctly.
Part 2: Examine the Practical Suspicious Email Bonus.csv File
Once again, you are the investigator at the same U.S.-based bank.
Your findings from the first monitoring effort have you very concerned,
and you have decided to open a case on your subject employee. The next
file you have under review is very different from the first, as it
contains what appears to be a series of random numbers. Note that the
file seems to be very large.
Based on findings from the first file:
- Choose a tool to inspect this second file and explain why you chose the particular tool.
- Create literal or regular expression searches to look for interesting data.
Show the results of your interesting findings and recommend further searches on other data based on your results.
For additional details, please refer to the Short Paper/Case Study Rubric PDF document.
0 comments