April 30 Practice Lab

Part I:

• Login to your account on AccessData Certification Site
• Open a new case in FTK, call it April30. Use Standard Forensic Processing with Additional Option: Create Thumbnails for Videos
• Add Mantooh.E01 image file to the case. Use our locat time zone.
• Take Test Exam on the Training Site. Document questions and answers in the Word File, document the score you received.

Part II

• Remove Mantooth image, and Add precious.E01 image to the case
• Answer the following questions. Document your answers in the Word file.
  • Find the number of Actual Files with Bad Extension which are NOT Graphics files
  • Find the number of Deleted Graphics Files
  • Find SID of Frodo Baggins and create a filter to find all files that belong to Frodo Baggins. How many did you find?

Submit Word file on Campus Cruiser