4 Installed Printers this could help with potentially identifying which ports

4 installed printers this could help with potentially

This preview shows page 21 - 27 out of 29 pages.

Image of page 21
Analysis and Discussion 1)In your own words, explain why is it important to use tools like WinAudit, DevManView,and Frhed. 2)In the lab, you used Frhed to investigate a file, but Frhed can also be used to investigate disk drives. Open a remote connection to TargetWindows01 and use Fhred to investigate the 10GB disk drive. Identify the partition format and its hex code. Make a screen captureshowing your results.
Image of page 22
3)Open a remote connection to the TargetWindows01 machine and use Frhed to open the cert_efs.pfx certificate file (C:\ISSA_TOOLS\ForensicsTools\cert_efs.pfx). Identify the encryption format and the user account the encrypted certificate was issued by. Make a screen capture showing your findings.
Image of page 23
Image of page 24
Image of page 25
Lab #2 - Assessment Worksheet Documenting a Workstation Configuration using Common Forensic Tools Course Name and Number: ___ITN 276_______________________________________________________ Student Name: _____Haris Ahmad Haidari__________________________________________ Instructor Name: ___________ H. Razaq M.S. ________________________________________ Lab Due Date: ____
Image of page 26
Image of page 27

You've reached the end of your free preview.

Want to read all 29 pages?

  • Fall '15
  • CarterSchoenberg
  • Forensic Science, Computer Forensics, Personal computer, Hard disk drive, WinAudit, DevManView , Itn 200

  • Left Quote Icon

    Student Picture

  • Left Quote Icon

    Student Picture

  • Left Quote Icon

    Student Picture