Forensic Investigation

Please choose ANY THREE PARTS from the following six parts and complete the report for your chosen three parts.

Part 1: Preparing for a Forensic Investigation

Part 2: Analyzing an E-mail Archive for an Electronic Discovery Investigation

Part 3: Analyzing Evidence from Mac OS X

Part 4: Decoding an FTP Protocol Session for Forensic Evidence

Part 5: Identifying and Documenting Evidence from a Forensic Investigation

Part 6: Conducting an Incident Response Investigation for a Suspicious Login

Sample Solution