You should create a new virtual machine - don't use your Kali machine]. Try booting the suspect's machine and using it normally [to do this,.On weekends, although we try to respond promptly. Has been known to take up to 24 hours to respond on weekdays and longer Important evidence and raise further questions you'll need to investigate.īe sure to contact your supervisor (i.e., your assigned TA) Or network services that the suspect may have used. Indicate which of these files are relevant to each response.Īs you investigate, be on the lookout for evidence of any other machines If you submit such files, your report should clearly You may include recoveredįiles in your submission. In a file called index.html or homework8.pdf.
Submit your answers in HTML or PDF format,
Key details, we do not want a full transcript of the commands you took to complete your if you got stuck on it, explicitly include it). Explicitly give any particularly tricky commands or sequences of commands,Īlong with a short explanation (i.e. Your answers should be thorough enough thatĪnother investigator with basic Linux knowledge would be able to More than one or two paragraphs to answer.įor each prompt (all of them!), explain the investigatory methods you used and the evidence The deliverables for this project are your answers to the eight numberedĪnswers should be complete but concise. Nefarious's hard drive and document any evidence relating to the murder ofĥ0405838f1f105e0d1dc748b547d773dcbd1b1df ('sha1sum -b filename' on On this assignment, you will conduct a forensic investigation of Guessing, the drive has finally been unencrypted. Track of the encryption key, and the equipment was returned to Nefariousīefore the mistake was realized. Unfortunately,Īn overzealous junior investigator encrypted the drive image without keeping Suspect, Nefarious Criminal, and seized his computer. Responding to this tip and other circumstantial evidence, officers arrested their only On the 27th from an individual under the pseudonym of Investigating officers had their first big break when they received an email tip Known as a "nerf blaster dart" which appeared, inexplicably, to have been Hapless Victim, was killed while working in the CS building sometime between Years ago, in the snowy Midwestern wastes of Ann Arbor Michigan, a young man's life No changes, you automatically get this point). Posting by Tuesday night (April 21) is 1 point of the assignment (if there are We'll assume that your groups are the same asīefore, but if there are any changes you should post on Piazza to let us know. Your partners, please post a private Piazza note that includes the namesĪnd logins of your group members. Past assignments - you may chose new partners. There is no need to use the same groups you had in Due Saturday, December 19 at 7:00 PMĪssignment.
0 kommentar(er)
