You reviewed the forensic capabilities each tool
Questions & Answers
1. What is the main purpose of a software tool like WinAudit in computer forensics?
Yes, WinAudit can be run from a flash drive or other external media. It is important so that the computer hard drive being investigated does not get altered.
4. Why would you use a tool like DevManView while performing a computer forensic investigation?
Device Manager
7. Why would someone use a Hex editor during a forensic investigation?
Target.jpg opens in a Windows Photo Viewer application. It is an image file. It displays the following text:
This is an image file who's extension has been changed to make it seem like its an unknown file type.
Captures & Reports (page 1 pictures)
Part 1, Step 5
Part 1, Step 11
Part 2, Step 7
Part 3, Step 13