Homework 6 (20 points)

This assignment is designed to give you an opportunity to work with WinHex to compare files and to analyze hard drive images and search for hidden image files with ProDiscover .

Assignment
• Chapter 5 Hands-On Project 5-2 (Pages 244-249)
• Chapter 8 Hands-On Project 8-1 (Pages 353-354)
• Chapter 9 Hands-On Project 9-2 (Page 384)
• Chapter 9 Hands-On Project 9-3 (Page 385)
• Chapter 9 Hands-On Project 9-4 (Page 386)
• Please note that Hands-On Projects 9-2, 9-3 and 9-4 require around 8 GB of hard drive space. You may use the Sleiman lab computers if you do not have adequate free space on your personal computer.

Assignment Deliverables
• Submit your findings as directed at the end of Hands-On Project 5-2.
• Print out and submit the ProDiscover report generated on page 354 for Hands-On Project 8-1.
• Submit the list of hash values determined in Hands-On Project 9-2.
• Submit a professional memo outlining your findings of Hands-on Projects 9-3 and 9-4. It is also advisable to include an appendix of supporting files and evidentiary artifacts in addition to the memo.
• Submit the OSForensics report generated in Hands-on Project 9-4.