Forensic Report: Analyzing EDRM Data with Winhex and Autopsy Tools

This report details a digital forensic investigation utilizing Winhex and Autopsy to analyze the EDRM Enron data set. The report begins with an introduction to Winhex, a universal hex editor used for data recovery and low-level data processing, and describes the steps taken to decode scrambled bits within a text file. The investigation then shifts to a broader analysis of the EDRM Enron data set, a standard collection of email data, focusing on the prevalence of unsecured personal and financial information. The report outlines the use of Autopsy, a GUI-based software for computer forensics, to analyze the dataset, including file system analysis, identifying registered owners, and examining network devices. The analysis also involves the identification of keywords and the investigation of potential evidence related to financial fraud and other criminal activities. The report includes the use of tools for data recovery and investigation and discusses the challenges faced by forensic investigators, such as preserving evidence and addressing time stamps. The findings of the investigation are summarized, including the identification of emails containing personal data, credit card numbers, and social security numbers. The report concludes by highlighting the importance of digital forensics in modern investigations and the need to protect sensitive information in corporate data sets.