Digital Forensics Investigation of Comedians' Content

Contents
1 Summary............................................................................................................................2
2 Issue - 1 Presentation of content relating to offence......................................................2
3 Issue 2 – Identification......................................................................................................4
4 Issue 3 – Intent................................................................................................................18
5 Issue 4 – Quantity of Files..............................................................................................28
6 Issue 5 – Installed Software............................................................................................33
References...............................................................................................................................34
1

1 Summary
Primary focus of this project is explore the progressed computerized legal sciences images by
using reasonable tool. Basically, region of Western Australia does not offer access to modernized
substance related to comedians since it is unlawful access, guarantee and circle the propelled
substance related to jokesters. The comedians' automated substance are gotten to by malware. Thusly,
this examination is prerequisites to look into the propelled substance related to the jokesters.
Generally, the charge was make the law approval where by an eyewitness maintains to get to the
jokesters related data inside a work put. In any case, some entertainer's substance are gotten to without
the work put. Unfortunately, junior propelled operator got the advanced crime scene investigation
image of the PC that is comedians substance played out an authentic anchoring. Along these lines, this
condition the junior computerized criminology inspector wiped the primary hard drive from the PC.
Since, the reliable anchoring is done by forensically strong way. Thusly, the lesser pro easily chose
the legitimate picture. The suspect, Clark demies the getting to the entertainer content and moreover
Clark does not attest that the PC has a place with him. The Clark says, he doesn't by and large take the
PC home or jolt it. Thusly, senior analyst needs to assess the legitimate image of the lap which was
seized with right warrants. Furthermore, also Clark express the PC was polluted with malware that
achieved different potential substance appearing on the PC. This examination is done by using the
autopsy forensics tool. The examination will be done and discussed in detail.
2 Issue - 1 Presentation of content relating to offence
Here, client needs to give the presentation of substance relating to the offense. The gave logical
examination communicated that the charge was make the law prerequisite where by an eyewitness
pronounces to get to the comics related data inside a work put. Nevertheless, a few comedians
substance are gotten to without the work put. Shockingly, junior analyst obtained the criminology
image of the PC that is comedians substance played out a real anchoring. Thusly, this situation the
junior automated criminology analyst wiped the main hard drive from the PC. Since, the intelligible
acquiring is done by forensically stable way. Thusly, the junior analyst easily chose the criminological
picture. Thusly, senior analyst needs to examine the quantifiable image of the lap which was seized
with right warrants. This examination is done by using the autopsy forensics tool.
7 Zip extraction
Here, user needs to using the 7 zip extraction to open the all the provided case image and it converted
into the single case file. To extract the provided case file by using the below steps. Fisrt, user needs to
download and install the 7 zip software.After, open 7 zip and also open the provided case file. It is
illustrated as below.
2

Once files are upload successfullly on the 7 zip, after right click the case file to clck the 7 zip to
choose the extract to compressing the provided the case file into single case file. The compressing
process is demostrated as below (Boddington, 2016).
After, all the case file are compresed into case file.7z. But, provided case file does not converted into
single image otherwise it converted into one folder.Then, user requires to download and install the
autopsy tool. The installation of autopsy tool is finished, after open the autopsy tool to click the new
case. After, user enter the case information and save the case file to browser the directory. It is
demonstrated as below. Here, case name as digital forensics. Then, click the next button (Computer
forensics, 2010). Then, enter the case number is digital forensics case 01. After, proceed the analysis
by click the next button. Once new case created, after add the provided case file to choose the
unallocated disk image then click the next button. Then, browse the forensics image folder to choose
the appropriate folder and click the forensic image which is 182.7z.002. Then, click the next button.
After, configure the forensic image to ingest modules and click the next button. Finally, added the
data source for created case by click the Finish button. Successfully data source is added into the case.
Similarly, add the all the forensics images on the created case. The provided all the forensics image is
successfully added to the digital forensics case.
3

Once, data sources are added into the created case after user needs to identify the evidence for digital
forensics investigation. A detailed representation of all content identified, extracted and analysed in
the investigation are discussed in below issues.
3 Issue 2 – Identification
This issue is used to identify the information about the provided case file.
182.7z.001 - case file identification
Here, user needs to click the appropriate data to identify the case file information (CYBERCRIME
AND DIGITAL FORENSICS, 2018). The given case file has the one deleted file which is image file.
It is shown below.
The investigator provided the detailed representation of all content identified, extracted and analysed
in the given case file. The provide detail information is illustrated as below.
4

The investigator also provided the below information. The given case file has the three key word
search information such as Single regular expression search, Email address and Single literal keyword
search. Here, the single regular expression and single literal keyword search does not have the any
file. But, the email address key search file has the three files. The given case file has below results.
This results provide the email search information and one deleted file information (Gogolin, 2013).
182.7z.002 - case file identification
Here, user needs to click the appropriate data to identify the case file information (Philipp, Cowen and
Davis, 2010).The given case file has the one deleted file which is image file. It is shown below.
5

The investigator provided the detailed representation of all content identified, extracted and analysed
in the given case file. The provide detail information is illustrated as below.
The investigator also provided the below information. The given case file has the three key word
search information such as Single regular expression search, Email address and Single literal keyword
search. Here, the single regular expression and single literal keyword search does not have the any
file. But, the email address key search file has the three files. The given case file has below results.
This results provide the email search information and one deleted file information (Hayes, n.d.).
182.7z.003 - case file identification
Here, user needs to click the appropriate data to identify the case file information. The given case file
has the one deleted file which is image file. It is shown below.
6

The investigator provided the detailed representation of all content identified, extracted and analysed
in the given case file. The provide detail information is illustrated as below.
The investigator also provided the below information. The given case file has the three key word
search information such as Single regular expression search, Email address and Single literal keyword
search. Here, the single regular expression and single literal keyword search does not have the any
file. But, the email address key search file has the two files. The given case file has below results.
This results provide the email search information and one deleted file information.
182.7z.004 - case file identification
Here, user needs to click the appropriate data to identify the case file information. The given case file
has the one deleted file which is image file. It is shown below.
7

The investigator provided the detailed representation of all content identified, extracted and analysed
in the given case file. The provide detail information is illustrated as below.
The investigator also provided the below information The given case file has the three key word
search information such as Single regular expression search, Email address and Single literal keyword
search. Here, the single regular expression and single literal keyword search does not have the any
file. But, the email address key search file has the two files. The given case file has below results.
This results provide the email search information and one deleted file information.
182.7z.005 - case file identification
Here, user needs to click the appropriate data to identify the case file information. The given case file
has the one deleted file which is image file. It is shown below.
8