Student Solution

-->

"Education is the most powerful weapon which you can use to change the world”
– Nelson Mandela

1 University

1 Course

1 Subject

Week 4 Lab 7 Submission

Week 4 Lab 7 Submission

Q Weekly Lab Exercises Login to Lab VMs is User: student Password: Pa$$word 1. Label each Lab Assignment by Week and Title. 2. Follow the steps for each lab. 3. Ask the instructor questions when you need clarification. 4. Use the Windows Snipping Tool or another Screenshot tool to take screenshots showing your steps to complete the lab. 5. Provide a short description accompanying each screenshot. 6. For any files submitted, place them in the Evidence folder, and zip the folder. 7. Describe any issues that you encountered doing the lab. 8. Describe what steps you take to resolve issues. 9. If you are still stuck, reach out to your instructor for support. Provide details identifying the lab, the step with issues, what you tried so far, including the research you did. Screenshots can be beneficial for problem resolution. 10. What research sources did you use? 11. Provide references for your sources in APA format (preferred) or Title and URL (alternative). 12. Provide a short paragraph describing what you learned. If this was something you already knew about, then explain what you reviewed in this lab. 13. How could the information in this lab provide value for an incident response investigation?

View Related Questions

Solution Preview

1 Double click the AccessData FTK Imager icon on your desktop to open FTK Imager. 2 Click File on the FTK Imager toolbar. Select Create Disk Image. I could not locate the file menu much less the option to create a disk image then after about minutes I realized I had opened EnCase instead of FTK Imager. 3 In the Select Source dialog box, select the Physical Drive option. Click Next. When selecting a physical drive the dropdown menu didn’t show drive letters so I instead selected the drive that was the same size as the “s” drive. 4 Select your drive from Local Devices by placing a check in the box next to the drive you intend to image. Click Finish. Note: For this exercise, the intended virtual thumb drive is the Evidence (S) drive. 5 In the Create Image dialog box, click Add. 6 In the Select Image Type dialog box, select Raw (dd). Click Next.