Chapter 14 Homework This Report was created by Pro Discover

Evidence Report for Project: InChap14

Project Number: InChap14

Project Description:

Image Files:

File Name: C:\Work\Data Files\Chap14\gcfi-win98.dd

Image File Type: DFT Image

File Number: Unknown

Technician Name: Unknown

Time Zone Information:

Time Zone: (GMT-08:00) Pacific Time (US & Canada); Tijuana (Pacific Standard Time)

Hard Disk: C:\Work\Data Files\Chap14\gcfi-win98.dd

Volume Name: NO NAME

Disks:

Evidence of Interest:

Total Evidence Items of Interest: 6

Hard Disk: Unknown

List of Files:

C:\Work\Data Files\Chap14\gcfi-win98.dd\WINDOWS\Application

___________________________________________________________________________

_____________________

Investigator’s comments: Files for case report InChapter14

___________________________________________________________________________

_____________________

Investigator’s comments: Files for case report InChapter14

___________________________________________________________________________

_____________________

C:\Work\Data Files\Chap14\gcfi-win98.dd\My Documents\SB\Inventories\Speedy

Investigator’s comments: Files for case report InChapter14

___________________________________________________________________________

_____________________

Investigator’s comments: Files for case report InChapter14

___________________________________________________________________________

_____________________

C:\Work\Data Files\Chap14\gcfi-win98.dd\My Documents\SB\Sales\Speedy

___________________________________________________________________________

_____________________

Clusters of Interest:

File Signature Mismatch:

Registry Keys of Interest:

Event Log Entries of Interest:

Internet Activity Information:

Search Results:

—————————————————————–

Image File Name: C:\Work\Data Files\Chap14\gcfi-win98.dd

—————————————————————–

Keyword:.ods, .sxc, .dbx

—————————————————————–

WINDOWS\Application

Data\Identities\{95286EE0-564A-11D3-82D6-BF9664A29206}\Microsoft\Outlook

Express\Pop3uidl.dbx

WINDOWS\Application

Data\Identities\{95286EE0-564A-11D3-82D6-BF9664A29206}\Microsoft\Outlook Express\Deleted

Items.dbx

WINDOWS\Application

Data\Identities\{95286EE0-564A-11D3-82D6-BF9664A29206}\Microsoft\Outlook Express\Sent

Items.dbx

WINDOWS\Recent\Speedy Financials3.sxc.lnk

List of words found:

—————————————————————–

Project Notes: