University Digital Forensics Project: CO4514 USB Analysis

This project details a digital forensics investigation of a USB disk image file, undertaken as a simulated case for the UCLAN high-tech crime unit. The scenario involves an employee of Vamos Solutions suspected of stealing company secrets by copying them onto a USB device. The investigation uses the Autopsy tool to analyze the provided DD image, addressing key questions about the presence of company secrets, attempts to conceal data, the suspect's motives, and required additional evidence. The project successfully recovers and examines various files, including office documents, a temporary file, and a plain text file, revealing evidence of company secrets and the suspect's intent to steal the data, including email content and salary information. The conclusion confirms the suspect's actions, based on the analysis of the USB storage device content. Screenshots of the file recovery process are provided.