cyber crime
mosa madi
home9.pptxImage Validation
في هذا التمرين
سوف تتعلم كيف يمكن أن يتم عمل Validation لأي image
وسوف تتعلم كيف يمكن تغير محتويات image
وكيف يمكن أن نتحقق فيما اذا كانت ال image قد تم التلاعب بها
Project – Step by Step
Start FTK
File
Add Evidence Item
Select “Image File”
Click Browse
Select the image that can be found HERE
Click Finish
Go to File, and select “Verify Drive/Image”
Compare the results with that saved in the metadata file HERE
Project – Step by Step
Start OSForensic.
Go to “Mount Drive Image”
Select “Mount New”
In the “Source” window, brows for the image file.
In the “Dive Letter” option, select any letter.
Select “Mount as removable media” and remove check from Read-only drive.
Click ok
Project – Step by Step
Go to my computer and You will notice that the drive is created.
Do any changes on the mounted drive.
Go back to OSForensic
Click “Dismount all & Exit”
Again, upload the image to FTK and repeat steps 1 to 9
Write your notice
