Title: Forensics Lab: Installations
Course: CAP 2140 Digital Forensics > Section: Computer Forensics and Investigations as a Profession

Overview

AccessData’s Forensic Toolkit (FTK) combines an extensive array of computer forensics tools into a single stand-alone software suite. FTK allows investigators to analyze a computer hard drive and search for files, folders, emails, documents, pictures, and any remaining evidence that might have been deleted or altered. In this lab, you will install FTK, and then install the Known File Filter (KFF). The KFF Library is a database that provides file signatures for popular software programs such as Microsoft Word or Excel. We will also install the FTK Imager, which can be used to preview digital files to determine whether evidentiary data exist in the form of documents, graphic files, deleted files, or encrypted files before an extensive investigation is initiated. We will also install ProDiscover which supports the searching of entire storage disks for existing and deleted files, graphic images, Internet history, and Windows registry keys. Lastly we will be installing AccessData Registry Viewer which is the central repository where Windows stores options and settings for hardware, installed software, and computer user-specific information such as account user names and passwords. The registry is responsible for booting into the Windows environment based on user preferences, and it contains valuable forensic information.

Complete ONE of the following labs located at the end of Chapter 1 in the lab manual:

- 1.1 Installing AccessData’s Forensic Toolkit into Win. 7
- 1.2 Installing FTK Imager
- 1.3 Installing ProDiscover Basic
- 1.4 Installing AccessData Registry Viewer

Be sure to carefully follow the directions for the project and include the full name and description of the project in your submission so that your instructor knows which project you chose.

Submission: To submit your file, choose the link above. Use the "Browse My Computer" button in the Attach File area to attach your document. Be sure to complete your submission by choosing the "Submit" button at the bottom of the screen. Make sure that you follow the due dates in the course calendar.

This lab will be graded using the Lab Assignment Rubric. Please use it as a guide toward successful completion of this lab.