Fill in the fields in the a New screen.” “Add Type /home/administrator/Desktop/usbimage1.dd “Location” Method” select copy. “Import Click “Next.” Select Image” on the right, ensure the is selected in the drop down of “Volume “dos” “Volume System Type”. Click “OK.” Select the topic, Integrity” and check hash after importing”. Click “Calculate” “Data “Verify the button. “Add” Once the calculations are done, click the button. “OK” Task 2: Locate deleted/hidden files Click the button. “Analyze” Select Analysis” “File
Fill in the fields in the “Add a New screen.” “Location” Type /home/administrator/Desktop/usbimage1.dd “Import Method” select copy. Click “Next.” Select “Volume Image” on the right, ensure the “dos” is selected in the drop down of “Volume System Type”. Click “OK.” Select “Calculate” the topic, “Data Integrity” and check “Verify hash after importing”. Click the “Add” button. Once the calculations are done, click the “OK” button. Task 2: Locate deleted/hidden files Click the “Analyze” button. Select “File Analysis”
2%20-%20BasicForensicAnalysisAutopsy.docx