Smt.

Chandibai Himathmal Mansukhani College

Cyber Forensics (USCS603)
Practical 1:
Creating a Forensic Image using FTK Imager/Encase Imager

Learning Objectives
Students will be able to:
Content:
➢ What is disk imaging and how to use forensic image tool
➢ How to create disk image of folders, physical, logical drive,USB drive.
➢ How to get deleted contents of logical / physical drive by imaging same using FT
Process:
➢ One has followed different steps in FTK tool to create imaging to
drives/folder/hard disk as required.

Prior Knowledge:
➢ Basic idea of what is imaging its uses and where it is used in real world.

I. Disk Imaging:

II. FTK Imager:

Name: ______________________________ Date: _______________________ 1

Smt. Chandibai Himathmal Mansukhani College
Q.1 Creating a Forensic Image of any of a directory folder and Analyze the drive forensic
Image: -
A] Creating Forensic Image of a directory folder

Batch: ___________ / Roll No: ________________

2
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College

Name: ______________________________ Date: _______________________ 3

Smt. Chandibai Himathmal Mansukhani College

Notes:

Batch: ___________ / Roll No: ________________

4
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College

Name: ______________________________ Date: _______________________ 5

Smt. Chandibai Himathmal Mansukhani College

MD5 Hash:

MD5 Checksum:

SHA1 hash:

Batch: ___________ / Roll No: ________________

6
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College
Different types of Image Type Selection options:

I. Raw(dd):

II. SMART:

III. E01:

Name: ______________________________ Date: _______________________ 7

Smt. Chandibai Himathmal Mansukhani College
IV. AFF:

B] Analyze Forensic Image

Batch: ___________ / Roll No: ________________

8
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College

Name: ______________________________ Date: _______________________ 9

Smt. Chandibai Himathmal Mansukhani College
Q.2 Create a forensic Image of any of one hard disk drive and Analyze the drive
forensic Image: -

A] Create Forensics Image of hard disk drive:

Batch: ___________ / Roll No: ________________

10
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College

Name: ______________________________ Date: _______________________ 11

Smt. Chandibai Himathmal Mansukhani College

Batch: ___________ / Roll No: ________________

12
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College

Name: ______________________________ Date: _______________________ 13

Smt. Chandibai Himathmal Mansukhani College

B] Analyze Forensic Image

Batch: ___________ / Roll No: ________________

14
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022
Smt. Chandibai Himathmal Mansukhani College

Name: ______________________________ Date: _______________________ 15

Smt. Chandibai Himathmal Mansukhani College

Date: _______________________ Teachers Signature: ________________

Batch: ___________ / Roll No: ________________

16
Smt. CHM College/CS Dept./Sem-VI/USCSP601/USCS603/2021-2022