Exercise
Data set
Chapter 6 Owl Exercise.e01
Software needed
Autopsy - https://www.autopsy.com/
Scenario
In a jurisdiction where owls are illegal to trade and buy, two users are discussing the illegal trade of owls. A computer is taken into evidence belonging to a user who is attempting to purchase owls illegally. It has been requested that you conduct an analysis of the digital evidence. A forensic image has been obtained and is ready for you. You may use Autopsy or any other tool.
Some artifacts you may want to look for include:
- Web searches
- Shopping searches
- Chat clients
- Documents
- Social networks
- OS artifacts
- LNK files
- Recycle Bin
- Shellbag
Potential keywords:
- Owl
- Owlet
- Feathers
- Eggs
- Crossbreeding
- Nocturnal
- Nest
- Hoot
- Conservation
- Wingspan
Join our community on Discord
Join our community’s Discord...