Reference no: EM132444628

System Image Analysis

Assignment

Using the image file provided by your instructor, document your understanding of the system that this was captured from. Identify operating system, applications installed, user account(s) that exist on the system, data that exists on the computer. Identify anything that you think looks odd or unusual.

Question 1. A one paragraph (min) to one page (max) written BLUF-format document of your understanding of this system. Imagine that you are testifying in court as to what you found. This one pager would be the initial document you'd probably read in court. Be precise and factual, of statements about items that you've located. Make sure to reference the hash verification you did on the image to ensure you're working with the right thing.

Question 2. A file system hierarchy diagram (with a format of your choosing) that expresses your understanding of this system's files. Submit the diagram flattened to a PDF or image file, or as a page of your document.

Question 3. A list of user accounts that have access to the system or have used it.

Question 4. A list of data files that you found. Sort and organize the list in a way that makes sense to you. Describe the contents of the data files you've found. (e.g. Don't just tell me that they are .jpg files - what are the images of?)

Question 5. A description of the application history of the primary user's typical programs - web browsers, email programs, word processing programs, spreadsheet programs, etc.

Question 6. Any Indicators of Compromise (IOCs) that you might identify, or that you think are potentially suspicious.

Note: Use the APA formatting for citation.

Attachment:- System Image Analysis.rar