{"id":6225,"date":"2022-11-19T08:43:18","date_gmt":"2022-11-19T08:43:18","guid":{"rendered":"https:\/\/sajinshivdas.com\/security\/?p=6225"},"modified":"2023-03-27T08:31:53","modified_gmt":"2023-03-27T08:31:53","slug":"a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise","status":"publish","type":"post","link":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/","title":{"rendered":"A Digital Forensics- Investigation based on Case Study&#8217;s from NIST (Lab Exercise)"},"content":{"rendered":"[vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/2&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 18.0pt;\"><span style=\"font-weight: bold;\">Table of Contents <\/span><\/p>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"disc\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Basic Computer Skills for Digital Forensics <\/span>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"circle\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Number Systems<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">PC Introduction<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Windows Command Line Tutorial<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Linux Command Line Tutorial<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Advanced Linux Command Line Tutorial<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Computer and Digital Forensics (updated on Oct. 2021) <\/span>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"circle\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Introduction to Digital Forensics<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Sleuth Kit Tutorial<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">USB Image Acquisition<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Evidence Search &#8211; A Pattern Match Game (updated on May 2022)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Evidence Search &#8211; File Metadata<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Data Carving<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Steganography<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Forensic Report Template<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Computer Forensics Case Study <\/span>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"circle\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating NIST Data Leakage (Windows XP)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating P2P Data Leakage (Windows 10)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Illegal Possession of Images (&#8220;Networking forensics&#8221;)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Email Harassment<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Illegal File Transferring (Memory Forensics)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Hacking Case<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Morris Worm Attack (updated on September 2022)<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Mobile\/IoT Forensics Case Study <\/span>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"circle\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Android 10 (added on 10\/24\/2021)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating iPhone iOS 13 (updated on 6\/18\/2022)<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Investigating Drone (add on 12\/07\/2021)<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Forensic Intelligence Repository <\/span>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"circle\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Email forensics<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Illegal Possession of Images<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/2&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<h4>A Digital Forensics- Investigation based on Case Study&#8217;s from NIST (Lab Exercise)<\/h4>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 18.0pt;\"><strong>Basic Computer Skills for Digital Forensics <\/strong><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #a3a3a3; height: 232px;\" title=\"\" border=\"0\" summary=\"\" width=\"395\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.9152in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9048in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.9152in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/by53wTHtj5g2BJK\">Number Systems<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.9152in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/SBxDDqP4W2T9Wzd\">PC Introduction<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.9347in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/ppmZy7oiPQbP3NT\">Windows Command Line Tutorial<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8159in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.9152in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/KxMHfSKPibR6LtJ\">Linux Command Line Tutorial<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">8M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.9152in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/wp9HDY3bfESwqZ8\">Advanced Linux Command Line Tutorial<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 18.0pt;\"><strong>Computer and Digital Forensics<\/strong><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9048in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/CBRLabbX7n5zA6K\">Introduction to Digital Forensics<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/Hkyoi7ZYfqNeqc5\">Sleuth Kit Tutorial<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/E5Y3b6i7mRd4sDD\">USB Image Acquisition<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/LKDwoji3jJX6Jos\">Evidence Search &#8211; A Pattern Match Game<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/wJonj2dJ7Td2oce\">Evidence Search &#8211; File Metadata<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4694in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/55MpTKsMaX4JckM\">Data Carving<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8159in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/B6aK4mtkan9Ejt9\">Steganography<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.45in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Forensic Report Template<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .8354in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 18.0pt;\"><strong>Tool Installation<\/strong><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Method 1: Importing customized Kali VM image<\/span><\/p>\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The customized Kali VM = Kali (2020.4) + <\/span><a href=\"#Tools\"><span lang=\"en-US\">tools<\/span><\/a><span lang=\"en-AE\"> used for completing most of the labs listed above (except p2p Data Leakage case)<\/span><\/p>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"disc\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">Install <\/span><a href=\"https:\/\/www.virtualbox.org\/\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">Virtualbox<\/span><\/a><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">Import the customized <\/span><a href=\"https:\/\/www.dropbox.com\/s\/y7svxg2pyy94ab5\/Kali-Linux-2020.4-vbox-amd64_tools.ova\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">Kali 2020.4<\/span><\/a><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">. Notes: the default harddisk size is 80G.<\/span><\/li>\n<\/ul>\n[\/vc_column_text][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Method 2: Installing tools using the customized script (the script ONLY is tested on Kali 2020.4)<\/span><\/p>\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">The following script will install tools needed for completing most of the labs listed above (except p2p Data Leakage case, which has its own script described in PPTs). Please let us know if you need us to add more tools to the script.<\/p>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"disc\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">Install <\/span><a href=\"https:\/\/www.virtualbox.org\/\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">Virtualbox<\/span><\/a><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">Install <\/span><a href=\"https:\/\/www.kali.org\/blog\/kali-linux-2020-4-release\/\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">Kali 2020.4<\/span><\/a><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">. Notes: Suggest You configure the disk size of Kali VM 80G because the size of each leakage cases image is 30G+<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">How to run the installation script <\/span><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">instructions<\/span><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">, or you can simply follow the commands below<\/span><\/li>\n<\/ul>\n[\/vc_column_text][vc_column_text]wget\u00a0 <a href=\"https:\/\/github.com\/sajinshivdas\/Digital-Forensics-Lab\/blob\/main\/Help\/tool-install-zsh.sh\">https:\/\/github.com\/sajinshivdas\/Digital-Forensics-Lab\/blob\/main\/Help\/tool-install-zsh.sh<\/a><\/p>\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">chmod +x tool-install-zsh.sh<\/p>\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">.\/tool-install-zsh.sh<\/p>\n<p><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">Installed <\/span><a href=\"https:\/\/github.com\/frankwxu\/digital-forensics-lab\/blob\/main\/README.md#Tools\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">tools<\/span><\/a><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">. Note that most of the commands for tools can executed globally. Now you can skip most of tool installation steps in PPTs.<\/span>[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 18.0pt;\"><strong>Computer Forensics Case Study <\/strong><\/p>\n[\/heading][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating NIST Data Leakage<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The <\/span><span lang=\"en-US\">case study<\/span><span lang=\"en-AE\"> is to investigate an image involving intellectual property theft. The study include<\/span><\/p>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"disc\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">A large and complex case study created by NIST. You can access the <\/span><a href=\"https:\/\/cfreds-archive.nist.gov\/data_leakage_case\/data-leakage-case.html\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">Scenario, DD\/Encase images<\/span><\/a><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\">. You can also find the <\/span><a href=\"https:\/\/cfreds-archive.nist.gov\/data_leakage_case\/leakage-answers.pdf\"><span lang=\"en-US\" style=\"font-family: Calibri; font-size: 11.0pt;\">solutions<\/span><\/a><span lang=\"en-AE\" style=\"font-family: Calibri; font-size: 11.0pt;\"> on their website.<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">14 hands-on labs\/topics in digital forensics<\/span><\/li>\n<\/ul>\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/9nc8KAimyFYzRw7\"><span lang=\"en-AE\">Environment Setting Up<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/QsMt64DRwnN3ZQc\"><span lang=\"en-AE\">Windows Registry<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/BeLGXo6CAYpH2Nm\"><span lang=\"en-AE\">Windows Event and XML<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/HJDMx99K4rRwss2\"><span lang=\"en-AE\">Web History and SQL<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/5TNiLp7TcEZRYXn\"><span lang=\"en-AE\">Email Investigation<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/XTsG34f43zbBFrZ\"><span lang=\"en-AE\">File Change History and USN Journal<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 6<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/ayDAprCSRARFd3X\"><span lang=\"en-AE\">Network Evidence and shellbag<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 7<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/XdCWNRiYSpdEC8P\"><span lang=\"en-AE\">Network Drive and Cloud<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 8<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/3jYDbCNQjXfD374\">Master File Table ($MFT) and Log File ($logFile) Analysis<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">13M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 9<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/ZFDet2Pom7NPadK\"><span lang=\"en-AE\">Windows Search History<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">4M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 10<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.1069in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/DWngnYN5nSYYri9\"><span lang=\"en-AE\">Windows Volume Shadow Copy Analysis\/SQL database carving<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 11<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/xkAQwAtmf2CCkPH\"><span lang=\"en-AE\">Recycle Bin and Anti-Forensics<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 12<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/LcmeKGKiDikzkxb\"><span lang=\"en-AE\">Data Carving<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 13<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.0875in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/t8no8e9yspz7Aat\"><span lang=\"en-AE\">Crack Windows Passwords<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating P2P Data Leakage<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The <\/span><span lang=\"en-US\">P2P data leakage case study<\/span><span lang=\"en-AE\"> is to help students to apply various forensic techniques to investigate intellectual property theft involving P2P. The study includes<\/span><\/p>\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"disc\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">A large and complex case involving a uTorrent client. The case is similar to NIST data leakage lab. However, it provides a clearer and more detailed timeline.<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Solid evidence with explanations. Each evidence that is associated with each activity is explained along with the timeline.<\/span><\/li>\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">10 hands-on labs\/topics in digital forensics<\/span><\/li>\n<\/ul>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/KYS2gSXT8XsxMgN\"><span lang=\"en-AE\">Lab Environment Setting Up<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">4M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/fRGnwAKmFm6nyNt\"><span lang=\"en-AE\">Disk Image and Partitions<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/qkysQBNDmy4nSPd\"><span lang=\"en-AE\">Windows Registry and File Directory<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">15M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/ykct4wzmsNK3kxi\">MFT Timeline<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/SxjeBKJApmDDr3L\"><span lang=\"en-AE\">USN Journal Timeline<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/WLzHrKYGq6w2SpK\">uTorrent Log File<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">9M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 6<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/xpSMFqMjwsJP3Ln\">File Signature<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">8M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 7<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/Kx28HkHc2dHZ9YJ\">Emails<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">9M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 8<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/68rjxx9dbS3tqtH\">Web History<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">11M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 9<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/m7CxtRCEDYcBPFS\">Website Analysis<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 10<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.4479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Timeline (Summary)<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7687in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">13K<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Illegal Possession of Images<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The <\/span><span lang=\"en-US\">case study<\/span><span lang=\"en-AE\"> is to investigate the illegal possession of Rhino images. This image was contributed by Dr. Golden G. Richard III, and was originally used in the DFRWS 2005 RODEO CHALLENGE. NIST hosts the <\/span><a href=\"https:\/\/cfreds-archive.nist.gov\/dfrws\/Rhino_Hunt.html\"><span lang=\"en-US\">USB DD image<\/span><\/a><span lang=\"en-AE\">. A copy of the image is also available in the repository<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.4326in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.4326in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/oGKZQ2cPKpXHjbw\"><span lang=\"en-AE\">HTTP Analysis using Wireshark (text)<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.4326in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/Ron5aXK8QWeKsXS\"><span lang=\"en-AE\">HTTP Analysis using Wireshark (image)<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.4326in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/EC39Y4qzL48PZiR\"><span lang=\"en-AE\">Rhion Possession Investigation 1: File recovering<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">9M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.4326in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/XK2iGwZDHFbfiHf\"><span lang=\"en-AE\">Rhion Possession Investigation 2: Steganography<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">4M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.4326in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/5GqLyB4cdLpbasY\"><span lang=\"en-AE\">Rhion Possession Investigation 3: Extract Evidence from FTP Traffic<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 4.452in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/AZi2XigeCkSB54y\"><span lang=\"en-AE\">Rhion Possession Investigation 4: Extract Evidence from HTTP Traffic<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Email Harassment<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The <\/span><span lang=\"en-US\">case study<\/span><span lang=\"en-AE\"> is to investigate the harassment email sent by a student to a faculty member. The case is hosted by digitalcorpora.org. You can access the <\/span><a href=\"https:\/\/digitalcorpora.org\/corpora\/scenarios\/nitroba-university-harassment-scenario\"><span lang=\"en-US\">senario description<\/span><\/a><span lang=\"en-AE\"> and <\/span><a href=\"http:\/\/downloads.digitalcorpora.org\/corpora\/scenarios\/2008-nitroba\/nitroba.pcap\"><span lang=\"en-US\">network traffic<\/span><\/a><span lang=\"en-AE\"> from their website. The repository only provides lab instructions.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 3.1805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 3.2in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Investigating Harassment Email using Wireshark<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 3.1805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">t-shark Forensic Introduction<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 3.1805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Investigating Harassment Email using t-shark<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Illegal File Transferring<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The <\/span><span lang=\"en-US\">case study<\/span><span lang=\"en-AE\"> is to investigate computer memory for reconstructing a timeline of illegal data transferring. The case includes a scenario of transfer sensitive files from a server to a USB.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Memory Forensics<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">11M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5604in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Understand the Suspect and Accounts<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7326in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Understand the Suspect\u2019s PC<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Network Forensics<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Investigate Command History<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 5<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Investigate Suspect\u2019s USB<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 6<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Investigate Internet Explorer History<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 7<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Investigate File Explorer History<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">part 8<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Timeline Analysis<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Hacking Case<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The <\/span><span lang=\"en-US\">case study<\/span><span lang=\"en-AE\">, including a disk image provided by <\/span><a href=\"https:\/\/cfreds-archive.nist.gov\/Hacking_Case.html\"><span lang=\"en-US\">NIST<\/span><\/a><span lang=\"en-AE\"> is to investigate a hacker who intercepts internet traffic within range of Wireless Access Points.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.1715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.152in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Hacking Case<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">8M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Morris Worm Attack<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The case study is an investigation of the <\/span><a href=\"https:\/\/seedsecuritylabs.org\/Labs_20.04\/Networking\/Morris_Worm\/\"><span lang=\"en-US\">Morris Worm Attacking<\/span><\/a><span lang=\"en-AE\">. We are using the VM provided by <\/span><a href=\"https:\/\/seedsecuritylabs.org\/labsetup.html\"><span lang=\"en-US\">SeedLab<\/span><\/a><span lang=\"en-AE\">. The goal of the lab is to find all evidence related to Morris Worm attacking.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.3013in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.3013in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Morris Worm Attack<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.3208in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">Investigating Morris Worm Attack<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Android 10<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The image is created by Joshua Hickman and hosted by <\/span><a href=\"https:\/\/digitalcorpora.org\/corpora\/cell-phones\/android-10\"><span lang=\"en-US\">digitalcorpora<\/span><\/a><span lang=\"en-AE\">.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/qgyjDPd7Jb3jNDG\"><span lang=\"en-AE\">Intro Pixel 3<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/kW8FsReEgeqTH4G\"><span lang=\"en-AE\">Pixel 3 Image<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/nrxRR5cCeEnWTQb\"><span lang=\"en-AE\">Pixel 3 Device<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">4M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/NEFH5FD4GqCotJ8\"><span lang=\"en-AE\">Pixel 3 System Setting<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/WjJMnd6ATyqdsxK\"><span lang=\"en-AE\">Overview: App Life Cycle<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">11M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.1.1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/bDL9K7RL92pzCdo\"><span lang=\"en-AE\">AOSP App Investigations: Messaging<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">4M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.1.2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/qxBDJm6mPfPtFBY\"><span lang=\"en-AE\">AOSP App Investigations: Contacts<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.1.3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/gmHisRaqxw7rjke\"><span lang=\"en-AE\">AOSP App Investigations: Calendar<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">1M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.2.1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/gDsFzN7jaWb3N6X\"><span lang=\"en-AE\">GMS App Investigations: Messaging<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.2.2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/6MgWpttSTENZiMB\"><span lang=\"en-AE\">GMS App Investigations: Dialer<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.2.3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/ES9S8qxAFxJtzbP\"><span lang=\"en-AE\">GMS App Investigations: Maps<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">8M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.2.4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/opegM5GnwTgHFfn\"><span lang=\"en-AE\">GMS App Investigations: Photos<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.3.1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/kaqnPBoRM2ksMKL\"><span lang=\"en-AE\">Third-Party App Investigations: Kik<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">4M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.3.2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6868in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/CWXjFQtW7j3QZ5X\"><span lang=\"en-AE\">Third-Party App Investigations: textnow<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">1M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7833in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5.3.3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6909in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/Pn8Cf6MAwdLmmzx\"><span lang=\"en-AE\">Third-Party App Investigations: whatsapp<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7638in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 6<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6715in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/SAGD28m7Bp9A6Aa\"><span lang=\"en-AE\">Pixel 3 Rooting<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating iPhone iOS 13.4.1<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The image is created by Joshua Hickman and hosted by <\/span><a href=\"https:\/\/digitalcorpora.org\/corpora\/cell-phones\/ios-13\"><span lang=\"en-US\">digitalcorpora<\/span><\/a><span lang=\"en-AE\">.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/PnY2qA2LFJt4akQ\"><span lang=\"en-AE\">Intro Intro iPhone iOS 13<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/k2HWeYrTwiYzaso\"><span lang=\"en-AE\">iOS 13.4.1 Image<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/9GPH4KdmKKMxkt3\"><span lang=\"en-AE\">iPhone Device investigation<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 3<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/zGBWwy8cRtTqHf6\"><span lang=\"en-AE\">iOS System Settings<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 4<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/66xNDGw2saSfEQp\"><span lang=\"en-AE\">Overview of App Life Cycle<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 5<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/yik4LHQnxRJFeHA\"><span lang=\"en-AE\">Messages Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 6<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/Q9sNppymMTaQTCz\"><span lang=\"en-AE\">Contacts Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 7<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/sTdB7HdPJno6CXM\"><span lang=\"en-AE\">Calender Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 8<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/eeFNs4iZoQTwsB7\"><span lang=\"en-AE\">Safari Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">3M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 9<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/GCrsTn78QPZtpJT\"><span lang=\"en-AE\">Photo Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">7M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 10<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/GAGfiQDqypmZL9r\"><span lang=\"en-AE\">KnowledgeC Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 11<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/Nx3DiapF5LoCSjY\"><span lang=\"en-AE\">Health_ Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">5M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 12<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/gosTddefb7ZFEpT\"><span lang=\"en-AE\">Location Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">8M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 13<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/brYsYqjWLZNE72A\"><span lang=\"en-AE\">Cellebrite Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">12M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 14<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0277in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/4roBRxf797qgSNm\"><span lang=\"en-AE\">Magnet Axiom Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">13M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 14<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.0083in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/SMwLbndntM9fCeX\"><span lang=\"en-AE\">Jailbreak Investigations<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">6M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Investigating Drone DJI<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span lang=\"en-AE\">The dataset includes logical files extracted from a DJI controller (mobile device) and a SD card image used by the device. The Drone dataset is created by <\/span><a href=\"https:\/\/www.vtolabs.com\/drone-forensics\"><span lang=\"en-US\">VTO Labs<\/span><\/a><span lang=\"en-AE\">. The lab covers GPS investigation and cached image retrieval. Note that it is a draft. We will improve the lab later.<\/span><\/p>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Labs<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5125in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Topics Covered<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .884in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Size of PPTs<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 0<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5125in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/WBYLMrwkjaRQT34\"><span lang=\"en-AE\">DJI Mavic Air Mobile<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">13M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 1<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5125in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/RHtxJMdy2D5kwPQ\"><span lang=\"en-AE\">DJI Mavic Air MicroSD Raw<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .752in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: .6673in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Lab 2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.5319in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/sajinshivdas.com\/nextcloud\/index.php\/s\/cmFGm6mc8i5pSqe\"><span lang=\"en-AE\">DJI Mavic Air MicroSD Encase Format<\/span><\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7423in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">2M<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; id=&#8221;Tools&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][heading]\n<p style=\"margin: 0in; font-family: Calibri; font-size: 16.0pt;\"><span style=\"font-weight: bold;\">Tools<\/span><\/p>\n[\/heading][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text]\n<ul style=\"direction: ltr; unicode-bidi: embed; margin-top: 0in; margin-bottom: 0in;\" type=\"disc\">\n<li style=\"margin-top: 0; margin-bottom: 0; vertical-align: middle;\"><span style=\"font-family: Calibri; font-size: 11.0pt;\">Commands tested<\/span><\/li>\n<\/ul>\n<div style=\"direction: ltr;\">\n<table style=\"direction: ltr; border-collapse: collapse; margin-left: .3333in; border: 0pt solid #A3A3A3;\" title=\"\" border=\"0\" summary=\"\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Name<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Command<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Repository<\/span><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><span style=\"font-weight: bold;\">Installation Method<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Wine<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">wine &#8211;version<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6347in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/source.winehq.org\/git\/wine.git\/\">https:\/\/source.winehq.org\/git\/wine.git\/<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Custom<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Vinetto<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">vinetto -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6263in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/AtesComp\/Vinetto\">https:\/\/github.com\/AtesComp\/Vinetto<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Custom<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">imgclip<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">imgclip -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/Arthelon\/imgclip\">https:\/\/github.com\/Arthelon\/imgclip<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">RegRipper<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">rip.pl -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/keydet89\/RegRipper3.0\">https:\/\/github.com\/keydet89\/RegRipper3.0<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Windows-Prefetch-Parser<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">prefetch.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/PoorBillionaire\/Windows-Prefetch-Parser.git\">https:\/\/github.com\/PoorBillionaire\/Windows-Prefetch-Parser.git<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Custom<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">python-evtx<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0416in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">evtx_dump.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/williballenthin\/python-evtx\">https:\/\/github.com\/williballenthin\/python-evtx<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">libesedb-utils<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0506in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">esedbexport -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/libyal\/libesedb\">https:\/\/github.com\/libyal\/libesedb<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">libpff<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">pffexport -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/libyal\/libpff\">https:\/\/github.com\/libyal\/libpff<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">USN-Record-Carver<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0472in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">usncarve.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/PoorBillionaire\/USN-Record-Carver\">https:\/\/github.com\/PoorBillionaire\/USN-Record-Carver<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">USN-Journal-Parser<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">usn.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/PoorBillionaire\/USN-Journal-Parser\">https:\/\/github.com\/PoorBillionaire\/USN-Journal-Parser<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">time_decode<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0506in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">time_decode.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.643in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/digitalsleuth\/time_decode\">https:\/\/github.com\/digitalsleuth\/time_decode<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Git clone<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">analyzeMFT<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0506in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">analyzeMFT.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/dkovar\/analyzeMFT\">https:\/\/github.com\/dkovar\/analyzeMFT<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">libvshadow<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">vshadowinfo -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/libyal\/libvshadow\">https:\/\/github.com\/libyal\/libvshadow<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">INDXParse<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0506in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">INDXParse.py &#8211;<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2722in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">carving sqlite .db<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">undark -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/inflex\/undark.git\">https:\/\/github.com\/inflex\/undark.git<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">stegdetect<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0479in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">stegdetect -V<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">stegbreak<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">stegbreak -V<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">stego-toolkit<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">jphide<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">jpsestego-toolkitek<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">jpseek<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">volatility-2<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">vol.py -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/volatilityfoundation\/volatility.git\">https:\/\/github.com\/volatilityfoundation\/volatility.git<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Customized scirpt<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">liblnk-utils<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">lnkinfo -h<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6236in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">apt install<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">JLECmd<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6347in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/f001.backblazeb2.com\/file\/EricZimmermanTools\/JLECmd.zip\">https:\/\/f001.backblazeb2.com\/file\/EricZimmermanTools\/JLECmd.zip<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Git clone<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">recentfilecache-parser<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.643in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/prolsen\/recentfilecache-parser\">https:\/\/github.com\/prolsen\/recentfilecache-parser<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .7805in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">LogFileParser<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.6368in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\"><a href=\"https:\/\/github.com\/jschicht\/LogFileParser.git\">https:\/\/github.com\/jschicht\/LogFileParser.git<\/a><\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Git clone<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.2527in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">UsnJrnl2Csv<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 1.0312in; padding: 4pt 4pt 4pt 4pt;\">\n<p lang=\"en-US\" style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: 2.643in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">ttps:\/\/github.com\/jschicht\/UsnJrnl2Csv.git<\/p>\n<\/td>\n<td style=\"border-width: 0pt; vertical-align: top; width: .9118in; padding: 4pt 4pt 4pt 4pt;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Git clone<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n[\/vc_column_text][vc_column_text]\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<div style=\"direction: ltr;\">\n<p style=\"margin: 0in; font-family: Calibri; font-size: 11.0pt;\">Other tools installed via apt install python3-pip, leafpad, terminator, sqlite3, tree, xmlstarlet, libhivex-bin, pasco, libhivex-bin, npm, binwalk, foremost, hashdeep, ewf-tools, nautilus<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"<p>[vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221;&#8230;<\/p>\n","protected":false},"author":1,"featured_media":6233,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,2],"tags":[30,29],"class_list":{"0":"post-6225","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security","8":"category-digital-forensics","9":"tag-cyber-security","10":"tag-digital-forensics"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>A Digital Forensics- Investigation based on Case Study&#039;s from NIST (Lab Exercise) - Sajin Shivdas | Cybersecurity<\/title>\n<meta name=\"description\" content=\"Table of Contents Basic Computer Skills for Digital Forensics Number Systems PC Introduction Windows Command Line Tutorial Linux Command Line Tutorial\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Digital Forensics- Investigation based on Case Study&#039;s from NIST (Lab Exercise) - Sajin Shivdas | Cybersecurity\" \/>\n<meta property=\"og:description\" content=\"Table of Contents Basic Computer Skills for Digital Forensics Number Systems PC Introduction Windows Command Line Tutorial Linux Command Line Tutorial\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/\" \/>\n<meta property=\"og:site_name\" content=\"Sajin Shivdas | Cybersecurity\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-19T08:43:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-27T08:31:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2022\/11\/wepik-20221019-124036.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sajin Shivdas\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sajin Shivdas\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"29 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/\"},\"author\":{\"name\":\"Sajin Shivdas\",\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/#\\\/schema\\\/person\\\/af1d121cbedd3ce64369f21a359ff2e6\"},\"headline\":\"A Digital Forensics- Investigation based on Case Study&#8217;s from NIST (Lab Exercise)\",\"datePublished\":\"2022-11-19T08:43:18+00:00\",\"dateModified\":\"2023-03-27T08:31:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/\"},\"wordCount\":5743,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/#\\\/schema\\\/person\\\/af1d121cbedd3ce64369f21a359ff2e6\"},\"image\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/wepik-20221019-124036.jpeg\",\"keywords\":[\"Cyber Security\",\"Digital Forensics\"],\"articleSection\":[\"Cyber Security\",\"Digital Forensics\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/\",\"url\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/\",\"name\":\"A Digital Forensics- Investigation based on Case Study's from NIST (Lab Exercise) - Sajin Shivdas | Cybersecurity\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/wepik-20221019-124036.jpeg\",\"datePublished\":\"2022-11-19T08:43:18+00:00\",\"dateModified\":\"2023-03-27T08:31:53+00:00\",\"description\":\"Table of Contents Basic Computer Skills for Digital Forensics Number Systems PC Introduction Windows Command Line Tutorial Linux Command Line Tutorial\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/wepik-20221019-124036.jpeg\",\"contentUrl\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/wepik-20221019-124036.jpeg\",\"width\":2560,\"height\":1440},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Digital Forensics- Investigation based on Case Study&#8217;s from NIST (Lab Exercise)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/#website\",\"url\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/\",\"name\":\"sajinshivdas.com\",\"description\":\"Cybersecurity - Information security Resources, Articles and Latest News\",\"publisher\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/#\\\/schema\\\/person\\\/af1d121cbedd3ce64369f21a359ff2e6\"},\"alternateName\":\"Sajin Shivdas\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/#\\\/schema\\\/person\\\/af1d121cbedd3ce64369f21a359ff2e6\",\"name\":\"Sajin Shivdas\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png\",\"url\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png\",\"contentUrl\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png\",\"width\":1000,\"height\":500,\"caption\":\"Sajin Shivdas\"},\"logo\":{\"@id\":\"https:\\\/\\\/sajinshivdas.com\\\/cybersecurity\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png\"},\"sameAs\":[\"http:\\\/\\\/sajinshivdas.com\\\/security\",\"www.linkedin.com\\\/in\\\/sajin-shivdas\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A Digital Forensics- Investigation based on Case Study's from NIST (Lab Exercise) - Sajin Shivdas | Cybersecurity","description":"Table of Contents Basic Computer Skills for Digital Forensics Number Systems PC Introduction Windows Command Line Tutorial Linux Command Line Tutorial","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/","og_locale":"en_US","og_type":"article","og_title":"A Digital Forensics- Investigation based on Case Study's from NIST (Lab Exercise) - Sajin Shivdas | Cybersecurity","og_description":"Table of Contents Basic Computer Skills for Digital Forensics Number Systems PC Introduction Windows Command Line Tutorial Linux Command Line Tutorial","og_url":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/","og_site_name":"Sajin Shivdas | Cybersecurity","article_published_time":"2022-11-19T08:43:18+00:00","article_modified_time":"2023-03-27T08:31:53+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2022\/11\/wepik-20221019-124036.jpeg","type":"image\/jpeg"}],"author":"Sajin Shivdas","twitter_misc":{"Written by":"Sajin Shivdas","Est. reading time":"29 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#article","isPartOf":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/"},"author":{"name":"Sajin Shivdas","@id":"https:\/\/sajinshivdas.com\/cybersecurity\/#\/schema\/person\/af1d121cbedd3ce64369f21a359ff2e6"},"headline":"A Digital Forensics- Investigation based on Case Study&#8217;s from NIST (Lab Exercise)","datePublished":"2022-11-19T08:43:18+00:00","dateModified":"2023-03-27T08:31:53+00:00","mainEntityOfPage":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/"},"wordCount":5743,"commentCount":0,"publisher":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/#\/schema\/person\/af1d121cbedd3ce64369f21a359ff2e6"},"image":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#primaryimage"},"thumbnailUrl":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2022\/11\/wepik-20221019-124036.jpeg","keywords":["Cyber Security","Digital Forensics"],"articleSection":["Cyber Security","Digital Forensics"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/","url":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/","name":"A Digital Forensics- Investigation based on Case Study's from NIST (Lab Exercise) - Sajin Shivdas | Cybersecurity","isPartOf":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#primaryimage"},"image":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#primaryimage"},"thumbnailUrl":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2022\/11\/wepik-20221019-124036.jpeg","datePublished":"2022-11-19T08:43:18+00:00","dateModified":"2023-03-27T08:31:53+00:00","description":"Table of Contents Basic Computer Skills for Digital Forensics Number Systems PC Introduction Windows Command Line Tutorial Linux Command Line Tutorial","breadcrumb":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#primaryimage","url":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2022\/11\/wepik-20221019-124036.jpeg","contentUrl":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2022\/11\/wepik-20221019-124036.jpeg","width":2560,"height":1440},{"@type":"BreadcrumbList","@id":"https:\/\/sajinshivdas.com\/cybersecurity\/a-digital-forensics-investigation-based-on-case-studys-from-nist-lab-exercise\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sajinshivdas.com\/cybersecurity\/"},{"@type":"ListItem","position":2,"name":"A Digital Forensics- Investigation based on Case Study&#8217;s from NIST (Lab Exercise)"}]},{"@type":"WebSite","@id":"https:\/\/sajinshivdas.com\/cybersecurity\/#website","url":"https:\/\/sajinshivdas.com\/cybersecurity\/","name":"sajinshivdas.com","description":"Cybersecurity - Information security Resources, Articles and Latest News","publisher":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/#\/schema\/person\/af1d121cbedd3ce64369f21a359ff2e6"},"alternateName":"Sajin Shivdas","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sajinshivdas.com\/cybersecurity\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/#\/schema\/person\/af1d121cbedd3ce64369f21a359ff2e6","name":"Sajin Shivdas","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2023\/01\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png","url":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2023\/01\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png","contentUrl":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2023\/01\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png","width":1000,"height":500,"caption":"Sajin Shivdas"},"logo":{"@id":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-content\/uploads\/2023\/01\/5dbd4f42-9550-4c99-82e9-34f3c99a2253.png"},"sameAs":["http:\/\/sajinshivdas.com\/security","www.linkedin.com\/in\/sajin-shivdas"]}]}},"_links":{"self":[{"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/posts\/6225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/comments?post=6225"}],"version-history":[{"count":0,"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/posts\/6225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/media\/6233"}],"wp:attachment":[{"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/media?parent=6225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/categories?post=6225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sajinshivdas.com\/cybersecurity\/wp-json\/wp\/v2\/tags?post=6225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}