What was the first date and time Norm logged into this computer from the Zero Bit domain?
Objectives: Perform Registry analysis Investigate Windows Events Search for evidence of antiforensic activity Resources needed: Windows forensics workstation FTK Imager Autopsy Registry Viewer Peterson Windows hard disk image Files from Canvas Lab 11 link Overview: In this lab we are going to dig into Norm’s Windows hard drive to see if he was attempting to […]