2 questions

Hashing Files

Hashing is very important in computer forensics. Defense experts often challenge computer forensic examiners on the integrity of their evidence. This case project will walk you through how to hash a file. It should only take you 30 minutes to complete this actual case project.

Navigate to the website http://www.karenware.com/powertools/pthasher.asp. Download Karen’s Hasher.

• Compose a document in Microsoft Word with just a couple of text lines. Save the document.
• Run Karen’s Hasher and get a hash value on your document. Document the hash value of your file.
• Go back to Microsoft Word and re-open your document. Make one slight change to your document and re-save using the same name.
• Run Karen’s Hasher and get a hash value on the modified document. Note this hash value.

Compose a 1 page narrative, explaining what a hash value is and why it’s important in computer forensics. Include the activities that you just conducted using Karen’s Hasher, documenting your hash values and discuss why the hash value changed.

File Recovery

Using any freeware or trialware, recover deleted files from a Windows computer. This can be a lab computer or your own computer. The best way to do this is use a thumb drive. Delete some files from it then run a recovery tool.

Explain what you did and what tool was used. Then answer the following questions:

1. Did the tool recover the deleted files?
2. What other files were recovered, if any?
3. How does data recovery differ from computer forensics?
4. What purpose do data recovery tools serve in computer forensic investigations?
5. Are data recovery tools forensics? Why or why not?

The assignment should include the following:

• An in-depth submission that should be free of spelling and grammar errors in APA format.
• An essay containing a minimum of 400-500 words documenting your research on the subject.
• You will be assessed on the rationale you use in addressing the questions/issue posted, and how well you justify your argument regarding this issue.
• Your response must be thought provoking, have well developed ideas and/or opinions, and should reference any supporting material from the text, lecture or other sources you have used to complete the assignment.
• You may use your text or the internet as a reference, but remember to cite your sources.  Please be sure to submit your assignment.

You may use your text or the internet as a reference, but remember to cite your sources.  Please be sure to submit your assignment.

***Assignment options: For those of you that do not like writing, you may submit a video of your work. You can download CamStudio (free) to “film” the work.  For a perfect score, narrate the video as if you were explaining your processes in the courtroom.