Devry Ccsi 410 Week 1 Lab

CCSI 410 Forensic Lab Report

1) Investigator’s Name: Luke Logsdon

2) Date of Investigation: 10 July 14

3) Lab Number and Title: Lab 1 - Logging into the Environment

4) Summary of Findings:

OutGuess is a steganographic program for inserting hidden data in inconspicuous data sources as means of hiding communication by keeping the encoding system secret by extracting redundant bits for modification provided a handler is provided.

5) Details of Investigation

<It is extremely important that you document each event that occurred during your investigation. These notes will be part of your evidence that supports your findings in court. For each step, remember to record the day of the week, date and time of investigation along with a brief summary of what has occurred. Here is an example:

The following events occurred on Thursday, July 10, 2014

1. 3:05 pm - Located Suspect machine. The machine is turned off.

2. 3:10 pm – Took pictures of the screen and surrounding area.

3. 3:15 pm – Found a password “snoopy” taped under the keyboard.

4. 3:25 pm – Disassembled suspect computer system and collected evidence and place in evidence bags, placed in evidence van for transit to forensics lab.

5. 4:00 pm - Arrived at forensics lab and transferred evidence into lab. Opened Evidence bags 1200314a (CPU unit), 1200314b (monitor), 1200314c (computer mouse, keyboard, speakers), and 1200314d (internet router and network cables).

6) Please type the answers to the questions found throughout the lab here.

Step 4 Question 1:

Step 4 Question 2:

Step 5 Question 3 - Name three ways FTK can make your investigation easier. Please include examples from a hypothetical crime to help illustrate your point.

Auto-file extraction process opens all files, mail messages, data streams, and other files from zip archives, OLE storage containers, and most e-mail archives which allows for faster processing...