Scribd
Upload
7 views12 pages

Lab5 NguyenPhuongNamSE183149FRS

The document outlines a series of steps for verifying and analyzing a DD image, including computing MD5 and SHA1 checksums, examining partitions, and extracting system information. It details tasks such as listing deleted files, verifying user accounts, and gathering network interface details. The process aims to ensure the integrity of the DD image and retrieve essential data from the system volume.

Uploaded by

phuongnamnguyendeptrai2004
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
7 views12 pages

Lab5 NguyenPhuongNamSE183149FRS

The document outlines a series of steps for verifying and analyzing a DD image, including computing MD5 and SHA1 checksums, examining partitions, and extracting system information. It details tasks such as listing deleted files, verifying user accounts, and gathering network interface details. The process aims to ensure the integrity of the DD image and retrieve essential data from the system volume.

Uploaded by

phuongnamnguyendeptrai2004
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Verify the unzipped DD image with MD5

Exam partitions of the DD image using fdisk

List file/directory names of the system volume


Copy HKEY_LOCAL_MACHINE (Hive) files to \lab

Verify five files


Step 3.
Verify you have the dd image

Compute MD5 and SHA1 of the DD image


Show partitions of the image

Show partitions and unallocated space using mmls


Display file system statistics and metadata information from a disk image (first partition)

List the second partition details


List all deleted .docx files in the whole partition?

Verify system information


Verify Users’ information

What is the installed OS information in detail?


What is the computer name?
How many accounts does the system have?
Search for profiles
Find and search for Security Accounts Manager (SAM) information

How many accounts does the system have?


6
When is the login time?
Sun Mar 22 15:55:57 2015 Z
Who was the last user to logon into PC?
When was the last recorded shutdown date/time?

Explain the information of network interface(s) with an IP address assigned by DHCP.

You might also like