my name:Aeshah
https://dfirmadness.com/case001/DC01-E01.zip
Questions [15 points]
Note: In order to get the full marks, provide the screenshot and explanations of every
step, with your name.
Open Autopsy, create a new case (with your name), add the above mentioned dataset
(0.5 pt)
Answer the following questions:
1- How many Documents in the image, give details. (1 pt)
2- Analyse and provide details about file “by Extension” (types and number of files for
each type) (1pt)
3- Export (Robot.txt ) (0.5 pt)
4- Identify saved bookmarks (0.5 pt)
5- Identify saved Web Cookies (0.5 pt)
6- What’s the Operating System? (1 pt)
7- What file system was used? (1 pt)
8- Find out how many secret files are shared? Provide details and identify the shared
secret? (1.5 pt)
9- What was the original name of Beth_Secret.txt? (0.5 pt)
10-Recover the file ” Beth_Secret.txt” (1 pt)
11-What Contect-Encoding used in a file named “NoJerry.txt”. (1 pt)
12-How many deleted files? (1 pt)
13-Extract one of the deleted file to your desktop (1 pt)
14-Find out anyone server error and write down error: (1.5 pt)
15-Tag any file by giving ‘Tagged’ name (0.5 pt)
16-Generate a report in Excel. (1 pt
0 comments