Assignment

Lab 1

We will be working with PC Inspector for this part of the lab.

Download the ZIP files from the Session 8 Lab section. (PC INSPECTOR File Recovery.zip)

Unzip it and run the installer. Follow the instructions.

Run the PC Inspector program you should see the following.

Choose "English" and click the green check.

Click on the icon to the left of "Recover deleted files"

Highlight the "Logical drive" and click on the green check mark.

See if you can see any files that were deleted.

Document your findings.Included:

Case Number

Investigator Name

Case Name

Date

Time

Location

Description of what you found.

Lab 2

Hex Workshop

In Session 4 you would have installed Hex Workshop then. Refer to the installation instructions in Session 4 if you did not.

Identify the file system of removable media with Hex Workshop:

· Launch Hex Workshop and select "Disk", "Open Drive".

· Select the removable media drive letter (such as a CD, DVD, USB, or flash memory card) and click "Ok".

· Identify the file system of at least two different types of removable media (such as a CD, DVD, USB, or flash memory card).

· Using your preferred Internet browser, perform a search to interpret the output of the first logical sector to identify the file system.

· Prepare a one-paragraph summary detailing your findings. Include screenshots where appropriate.

Lab 3

Access the BIOS or Open Firmware of a computer system:

· Identify the manufacturer of your computer.

· If it is a PC, determine the steps to access the BIOS.

· If it is a Mac, determine the steps to access the Open Firmware.

· Follow the steps to access either the BIOS or Open Firmware.

· Take a digital image using a smartphone or digital camera.

· Prepare a one-paragraph summary that includes the computer manufacturer information and the steps you took to access either the BIOS or the Open Firmware.

Include the digital image below your summary.