Digital Forensic Technology - Analysis and Results

Running head: CO4514 – DIGITAL FORENSIC TECHNOLOGY
CO4514 – Digital Forensic Technology
Name of the Student
Name of the University
Authors note

1CO4514 – DIGITAL FORENSIC TECHNOLOGY
Introduction
In case of the Digital forensics it is very important to extract, analyse and convey the
results of the analysis so that the results can be used as the evidences in the investigation as
well as prosecution process. The provided evidence is used reviewed and analysed which
was collected and provided to us by previous investigator. It is considered that the evidence
was verified as unaltered.
Background of the project
The USB drive image was captured from the detained employee and the captured
image is analysed in order to find out if the employee was offering proprietary company
(Vamos Solution) information to any of the competitors or any individual due to some
personal benefit or greed or for changing job.
Objective of the Project
The main objective was to check and determine if the employee recorded and
transferring any kind of data that are considered as confidential or business secret by the
organization.
Analysis technique and tools used
For this analysis, the Autopsy tool is used.
Analysis Details and results
Answer to question 1

2CO4514 – DIGITAL FORENSIC TECHNOLOGY
Validation of the availability of data in USB
For the provided USB stick data image, it is found that the file has been used to copy
company info which can be depicted in the following snapshot.
In the above screenshot, a file named income.xlsx is found that seems to be the
revenue and income details of the organization. The excel sheet includes the salary, pension,
dividend, share, and sales details of the Vamos Solutions.
Answer to question 2
Evidence of hiding or deleting data
When, the deleted file option is clicked in the Autopsy tools there are two files
available which are depicted in the following screenshot.