This assignment, MN624 Assignment 1B, focuses on digital forensics tools and techniques. It examines two key tools: Autopsy and FTK Imager. The assignment includes detailed steps for image creation using FTK Imager and Autopsy, along with the analysis of deleted files. The student compares the features and functionalities of Autopsy and FTK Imager, including their hashing methods (MD5 and SHA1), logging capabilities, file system support, and case management features. The assignment also provides a comprehensive overview of the tools' features, such as timeline analysis, keyword searches, registry analysis, and email analysis. The student also discusses the comparison between Autopsy and FTK Imager. The assignment concludes with a comparison table highlighting the key differences between the two tools, including their hashing methods, logging capabilities, cost, file system support, and specific features such as email client support and deleted file recovery.
![[object Object]](/_next/static/media/star-bottom.7253800d.svg)
