C840_Cyber_Forensics_Task_1.docx C-840 Cyber Forensic Table of Contents I. Ove

Document Content and Description Below

C840_Cyber_Forensics_Task_1.docx C-840 Cyber Forensic Table of Contents I. Overview…………………………………..3 a. Foren... sic Analysis Steps………………3 II. Incident Explanation……………………12 III. Summary of Investigation………………12 IV. Supplemental Data/E3 Generated Report 13 I. Overview On April 1st, 2021, D&B investigations was contacted by the Oil Company to investigate on their behalf due to the companys research engineer John Smith exfiltrating proprietary information and distributing it to rival companies. D&Bs investigation team went on-site to collect forensic evidence from Johns device and gave me the evidence for forensic analysis. To analyze the image file taken from John Smiths device, I used Electronic Evidence Examiner (E3), which allowed me to analyze all of Johns files and directories. a. Forensic Analysis Steps Using the Electronic Evidence Examiner (E3) program, I was able to analyze the contents of Johns Smiths device. I named the case file “JustinMcGee1052952” and imported the image file “JSmith 1GB” using the image file auto detect feature in the image file evidence category. Figure 1: Creating a new case in E3 Figure 2: Creating a new case with the name “JustinMcGee1052952” in Electronic Evidence Examiner. Figure 3: Using the auto detect feature in the image file evidence category. Figure 4: Selecting the image file “JSmith 1GB” from “Local Disk (C:) for importing. After selec. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . .. .. . . . . . . . . . . . . . . . . . .. . . . . [Show More]

Last updated: 1 year ago

Preview 1 out of 19 pages