Reference no: EM131607489
Hands-On Project
In this project, you create, and delete Word and Excel files on a USB drive (or small disk partition, if you don't have a USB drive), and then use OSForensics to examine the drive. Follow these steps:
1. Create C6Prj01 folders on your USB drive or disk partition.
2. Open a new document in Word, and type, This is to test deletings files and then wiping them. Save th file in the C6Prj01 folder as Test 6-1.docx, and exit Word.deletings files and then wiping them. Save th file in the C6Prj01 folder as Test 6-1.docx, and exit Word.deletings files and then wiping them. Save th file in the C6Prj01 folder as Test 6-1.docx, and exit Word.deletings files and then wiping them. Save th file in the C6Prj01 folder as Test 6-1.docx, and exit Word.
3. Open a new workbook in Excel. Type few numbers, and then save the workbook in the C6Prj01 folder as Test 6-2.xlsx. Exit Excel. numbers, and then save the workbook in the C6Prj01 folder as Test 6-2.xlsx. Exit Excel.
4. Use Windows Explorer or My Computer to delete both files from the USB or disk drive.
5. Start OSForensics, and start a new case. Type C6Prj01 for the case name, and enter Aileen for the investigator. Leave the Acquisition Type option as Live Acquisition of Current Machine, and specify the work folder you created for this chapter. Create subfolder called C6Prj01, and click OK.subfolder called C6Prj01, and click OK.
6. If necessary, click Manage Case in the left pane, and then click the Add Device button in the right pane. Click the drive letter of your USB device, make sure the Forensics mode option button is selected, and click OK.
7. Make sure the case you just created has a green check mark next to it; if not, double-click the case name, and then click Start in the left pane. Using the scroll bar on the far right, scroll down and click the Deleted Files & Data Carving icon. In the Deleted Files Search window, click the Disk list arrow, and then click the USB drive in the list of options. Click the Search button. Because you're searching for deleted files, you don't need to enter a file string or filter.
8. Double-click the Test 6-1.docx file in the lower pane to view its contents. You can also click the File Info tab to verify the file's MAC time. Repeat this process with the Test 6-2.xlsx file.
9. Close all open windows, and exit OSForensics.
|
Find the slope of c at the angle theta
: Concern C, the circle r = 2a cos ?, for -p/2 = ? = p/2, of radius a > 0 centered at the point (x, y)=(a, 0) on the x-axis.
|
|
Research and download a disk-cleaning and wiping
: In this project, you research and download a disk-cleaning and wiping, tool and verify that it works. Make sure you aren't on a production machine.
|
|
Describe the role of dsm-5 in making a diagnosis
: Discuss three changes that were made from DSM-IV to DSM-5 and describe the role of DSM-5 in making a diagnosis. Why is it used?
|
|
Discuss profound influence on effective learning
: Socio economic factors have profound influence on effective learning. Critically discuss this statement in relation to South Africa context
|
|
Usb drive or disk partition
: 1. Create C6Prj01 folders on your USB drive or disk partition.
|
|
Calculate the arc length of c using polar coordinates
: Concern C, the circle r = 2a cos ?, for -p/2 = ? = p/2, of radius a > 0 centered at the point (x, y)=(a, 0) on the x-axis.
|
|
Examine trait behavioral situational and path-goal approache
: Assignment: Approaches of Leadership PPT. Examine Trait, Skills, Behavioral, Situational, and Path-goal approaches/theories of leadership.
|
|
Explain the increasing concerns of the global climate
: David Fr idley argues that the growing cost of and demand for energy, along with the increasing concerns of the global climate, leaves us face
|
|
Write definite integral for the volume of the bounded region
: Write a definite integral for the volume of the bounded region formed by rotating the graph of y = (x-1)2(x+2) around the x-axis.
|