COMPUTER FORENSICS

PROJECT

Chris Ipina Itec 475

Adding Hard Drive to VB

New Hard Drive In VB

FTK

Capturing Disk Image With FTK

Image Creation

Disk Image Verification

New Disk Image

Adding New Image in to FTK Tool kit to search trough files

Typed In Keywords To Search

Results to Search. Searching trough email files

Searching Phone Files

Looking At More Phone Files

Sebastian's Phone Files

Nau’s Phone Files

Finding Password To Encrypted File

Password Cracking

Password Cracking Cont..

Password results: Password=“Computer1”

Opening Encrypted Folder

Encrypted Folder Data

Found Bad Image

Repairing Image by changing the Hexadecimal

Image recovered and repaired

PRODISCOVER

Adding Image to Prodiscover

Image Added and Ready to Search

Searching trough Files

Search Results/ Cant open them because we don’t have all the right programs on VB