Forensic Analysis of USB Drive: EMTS Assignment 3 Report

This report presents a digital forensics investigation centered around an EMTS case study involving a USB drive. The investigation utilizes forensic tools such as WinHex and ProDiscover to analyze data, recover deleted files, and uncover hidden information through stenography techniques. The report outlines the background scenario where an employee, Bob Aspen, is suspected of transferring sensitive company data. The investigation focuses on acquiring and analyzing the contents of a USB drive, which contains advertising information and potentially sensitive data. The report details the use of WinHex for recovering scrambled bits and ProDiscover for acquiring and analyzing the USB drive image. The findings include the recovery of deleted files and the application of stenography to reveal hidden data within images. The report also addresses the methodology of digital forensics, including identification, examination, analysis, and decision-making processes, along with the different types of digital forensic analysis. The conclusion emphasizes the importance of digital forensics in supporting criminal activities and the role of forensic tools in data recovery and analysis. The report also includes references to relevant literature and resources.