Report Generation with FTK
The purpose of this lab is to learn more about FTK and its powerful
reporting features necessary for presenting evidence.
Use the version of FTK (1.81.2) available on the Nelson textbook CD
or downloaded from the shared course drive to process the Lab file
under Course Content.
As with other labs, it is important in this lab to not only discuss
the processes and results but also show them. Make sure take
screenshots and discuss them. Please make sure to embed them in your
document and label them (e.g., Lab3-Image1: Selected images for
______).
Assignment
For this lab, complete the four basic steps. More details are
available in the FTK Instructions section. You will need the image in
the Course Content called Labs2-3.001
1. Use FTK to find all the pictures of real weasels and created a
bookmark.
2. Using the Report Wizard, create a report containing
the bookmark you just created.
3. Write a summation to describe the results of your actions and
illustrate them with your labeled screenshots. This should be a
separate word processed document (not made within FTK).
Basic FTK Instructions
You have a copy of FTK on your Nelson textbook CD. If you do not have
the CD, there is a copy in the course Google drive area.
After you have downloaded the file, run it and install the software.
FTK is a tool that requires a hardware dongle, but if you run it
without the dongle, it will operate in demo mode and is completely
sufficient to operate on our image.
Once you have installed it, start it by clicking on the Mushroom
ICON. It will tell you that you are missing the dongle and it is going
to run in DEMO mode. Click OK.
When the interface comes up, it will ask you if you want to start a
new case, hit Cancel and this window will go away.
INFA650: Lab3, 1
Explore the Menus
Look at the tabs below the menus:
1. The first tab is the Overview tab. Once you have processed the
image, this is where the containers that contain the different
kinds of files will be located.
2. The second tab is the Explore tab and you will not need this one
for these assignments. Basically, it gives you a windows explorer
like interface.
3. The third tab is very useful. It is the Graphics tab and here
you can see thumbnails of the graphic images contained in your
case.
4. The fourth tab is the E-mail tab. It is useful for looking at
just e-mail files.
5. The fifth tab is the Search tab and it too is very useful for
doing indexed or live searches.
6. The last tab is the Bookmark tab and you will need this for
Lab3. This is where you manage your bookmarks.
INFA650: Lab3, 2
Create a Case for Lab3
When you want to create a case, go to the File Menu and select New
Case. A window will open up asking for a case name and number. Name
your case with your last name and Lab3 (e.g., Jones_Lab3).
After you click next, it asks for personal information. Put your full
name and contact information (to include class e-mail) here so the
report will contain it.
Skip through the next couple of windows accepting the default settings.
When you get to the window that says "Add Evidence" in the top portion
of the window, click on Add Evidence.
The next window will ask you what kind of evidence you want to add,
and you will select the option for adding an image file and click
Next.
A browse button will come up asking you to browse to find the image
file. Browse to where you downloaded it and select it. Click Next.
If it asks for a time zone, pick the one that you are in. Click Next
until the image starts processing. It should not take more than a few
minutes to process and populate the containers.
INFA650: Lab3, 3
Bookmark for Lab3
For Lab3, you should use the Graphics tab to scroll through the pictures
and locate the weasels. Right Click on the first weasel picture
and select Create Bookmark. Call the bookmark Child Pornography and
accept the default options. After this, you can right click on each
file you want to add and select the Add to Bookmark option. Add all
of the real weasel pictures to the bookmark you created.
After you have created the bookmark containing all of the weasel pictures,
go to the File Menu and select Report Wizard. Accept the defaults,
but make sure that you add all Bookmarks, and export the associated
files to the report.
Click next until the report is generated. The report will be located
in the Report Folder inside the folder with the name of the Case that
you created. Compress all of the report files up in a zip file and
attach the file to the Lab3 submission.
Deliverable
In the assignment folder under Lab3, turn in your answer via a
compressed file. Use an appropriate filename:
yourLastName-Lab3.zip
avvipersonal
lab_3.docx
0
