You reviewed the forensic capabilities each tool

Questions & Answers

1. What is the main purpose of a software tool like WinAudit in computer forensics?

Yes, WinAudit can be run from a flash drive or other external media. It is important so that the computer hard drive being investigated does not get altered.

4. Why would you use a tool like DevManView while performing a computer forensic investigation?

Device Manager

7. Why would someone use a Hex editor during a forensic investigation?

Target.jpg opens in a Windows Photo Viewer application. It is an image file. It displays the following text:

This is an image file who's extension has been changed to make it seem like its an unknown file type.

Captures & Reports (page 1 pictures)

Part 1, Step 5

Part 1, Step 11

Part 2, Step 7

Part 3, Step 13