Use grep to search for all of these words in the keywords folder. Remember in Lab 8, we only saw Patterson user accounts? We want to double check for sure if there are any Peterson user accounts on this system.
File analysis, data carving, and keyword searches Lab Resources: Windows workstation with FTK Imager and Autopsy SIFT Workstation Peterson USB forensic image Peterson Linux hard drive forensic image PART 1 – Look for deleted files using FTK Imager Start FTK Imager Add the Peterson USB image file: Remember, FTK Imager is an imaging tool. While […]