Scribd Logo
Upload

Welcome to Scribd!

  • 18BCE2417 Digital Forensics Lab PDF

    Uploaded by

    YOGESH PANDIT
    258 views13 pages
    The document describes the findings from analyzing the Mantooth.E01 disk image file. Key findings include: 1) Mantooth was involved in child exploitation and trafficking of drugs like boose, marijauna, OTC, speedy drugs, and fringe. 2) Artifacts show communication between Mantooth and another individual named Gladiator. 3) Deleted files include 4 .exe files. The document also describes analyzing the Washer disk image. Preliminary findings show: 1) Washer had communication with Mantooth, proving a connection between the two. 2) The disk image contains discussions about making and trafficking "Special K", an apparent

    Original Description:

    Original Title

    18BCE2417 Digital Forensics Lab.pdf

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document describes the findings from analyzing the Mantooth.E01 disk image file. Key findings include: 1) Mantooth was involved in child exploitation and trafficking of drugs like boose, marijauna, OTC, speedy drugs, and fringe. 2) Artifacts show communication between Mantooth and another individual named Gladiator. 3) Deleted files include 4 .exe files. The document also describes analyzing the Washer disk image. Preliminary findings show: 1) Washer had communication with Mantooth, proving a connection between the two. 2) The disk image contains discussions about making and trafficking "Special K", an apparent

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    258 views13 pages

    18BCE2417 Digital Forensics Lab PDF

    Uploaded by

    YOGESH PANDIT
    The document describes the findings from analyzing the Mantooth.E01 disk image file. Key findings include: 1) Mantooth was involved in child exploitation and trafficking of drugs like boose, marijauna, OTC, speedy drugs, and fringe. 2) Artifacts show communication between Mantooth and another individual named Gladiator. 3) Deleted files include 4 .exe files. The document also describes analyzing the Washer disk image. Preliminary findings show: 1) Washer had communication with Mantooth, proving a connection between the two. 2) The disk image contains discussions about making and trafficking "Special K", an apparent

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 13

    Assignment 1

    Digital Forensics (CSE4004)

    YOGESH PANDIT
    18BCE2417
    Mantooth

    1) What type of file is Mantooth.E01

    Mantooth file has a file type of .E01 which is an image file.

    2) What is the Operating System?

    3) What is the File System?


    4) Provide the account name and last login information for each account present in
    Mantooth.
    5) If there is any evidence of .exe file being deleted, describe the artifact name and document
    your findings.
    4 .exe files were deleted.

    6) Find proof of communication with Gladiator.


    7) What is a "Pranic Vampire"? In which document is it mentioned? When was the document
    created?
    8) What is present in happy.mpeg?

    9) Check if picture of any drugs are present? If so name the drugs.


    Name of Drugs:

    10) Find the list of criminal activities Mantooth was involved in and the associated
    artifacts.

    10) Summarize the finding against Mantooth.


    Mantooth was involved in Child Exploitation and drug trafficking of the following drugs:
     Boose
     Marijauna
     OTC
     Speedy Drugs
     Fringe

    Also Mantooth was in contact with Gladiator.


    Washer

    1) What is the starting sector of Partition 2 and what is the size of it?

    2) What is the file system of the disk image?

    3) List the user names?

    4) Does Washer know Mantooth?


    Yes, proof of communication:

    5) How many .doc files are there? Extract all, document what is their content and their md5
    values.
    6)Who are all involved in the discussion about "Special K".
    7)Find the URL that is given for making drugs quickly

    8) What is the AOL IM name of Washer?

    You might also like