Evidence Report for Project: C08carve
Project Number: C08carve
Project Description:
Image Files:
File Name: C:\Work\Chap08\Project\c08carve.dd
Image File Type: DFT Image
File Number: Unknown
Time Zone Information:
Time Zone: (GMT-08:00) Pacific Time (US & Canada); Tijuana (Pacific Standard Time)
Daylight savings (summertime) was in effect: Yes
Time zone information obtained from Preferences settings.
Hard Disk: C:\Work\Chap08\Project\c08carve.dd
Volume Name: NO NAME
Volume Serial Number : 2D31-1BED
File System: FAT16
Disks:
Evidence of Interest:
Total Evidence Items of Interest: 7
Hard Disk: Unknown
List of Files:
C:\Work\Chap08\Project\c08carve.dd\Pictures\Friends\gametour5.txt
MD5 Checksum: 82199FA995265C3FC54B04DD89A153DC
Deleted:02/05/2007 00:00
C:\Work\Chap08\Project\c08carve.dd\Pictures\Friends\gametour1.txt
MD5 Checksum: E61611D933646773D295F291D2E9A196
Created:02/04/2007 20:19:56Modified:08/05/2001 09:22:56Last Accessed:02/05/2007 00:00:00
Cluster Chain:
Start Cluster End Cluster Total Clusters
4872 (1308) 5659 (161B) 788
C:\Work\Chap08\Project\c08carve.dd\Pictures\Friends\gametour2.txt
MD5 Checksum: FD157F6D9B79BE120614B185A6E01518
Deleted: Deleted: 02/05/2007 00:00:00
Cluster Chain:
________________________________________________________________________________________________
Deleted: Deleted: 02/05/2007 00:00:00
Cluster Chain:
Start Cluster End Cluster Total Clusters
Investigator’s comments: Additional similar files on USB drive
Clusters of Interest:
File Signature Mismatch:
Registry Keys of Interest:
Event Log Entries of Interest:
Internet Activity Information:
Search Results:
—————————————————————–
Image File Name: C:\Work\Chap08\Project\c08carve.dd
—————————————————————–
Keyword:zzzz
Hits: 4
—————————————————————–
List of data files in which search patterns found:
