4 installed printers this could help with potentially

Analysis and Discussion
1) In your own words, explain why is it important to use tools like WinAudit, DevManView,
and Frhed.
2) In the lab, you used Frhed to investigate a file, but Frhed can also be used to investigate
disk drives. Open a remote connection to TargetWindows01 and use Fhred to investigate
the 10GB disk drive. Identify the partition format and its hex code. Make a screen capture
showing your results.

3) Open a remote connection to the TargetWindows01 machine and use Frhed to open the
cert_efs.pfx certificate file (C:\ISSA_TOOLS\ForensicsTools\cert_efs.pfx). Identify the
encryption format and the user account the encrypted certificate was issued by. Make a
screen capture showing your findings.

Lab #2 - Assessment Worksheet
Documenting a Workstation Configuration using Common
Forensic Tools
Course Name and Number:
___ITN 276_______________________________________________________
Student Name:
_____Haris Ahmad Haidari__________________________________________
Instructor Name:
___________ H. Razaq M.S. ________________________________________
Lab Due Date:
____