1) You work for the mid-size corporation known for its inventions which does a lot of copyright and patent work. You are investigating an employee suspected of selling and distributing the animations generated for your corporation. At the time of investigation of suspect's drive, you discover some files with the unfamiliar extension .cde. The network administrator specifies that other .cde files have been sent through an FTP server to the other site. Explain your findings in the 1-2 page report after conducting an Internet search for this file extension.

2) A drive you are investigating consists of different password-protected files and other files with headers which don’t match the extension. Write down a report explaining the procedures you required to follow in order to retrieve the evidence. Recognize the mismatched file headers to the extensions and discuss the techniques you may apply in order to recover the passwords from protected files.