Digital Forensics – Exploring MFT and Exploring Metadata of File
Hands-on Project 5-2, Exploring MFT and Exploring Metadata of File (7 Marks)
Note this project has the maximum marks in this task and requires advanced knowledge and skills of the topic. Write an MS Word report after completing this project describing what metadata you have discovered from the file you analysed using WinHex editor. Note that if you like, you can use any other Hex editor as well such as HxD or Neo. You are required to compare your results with the information provided in the textbook and comment on any discrepancies that you may have encountered. Provide screen shots of the steps completed in the project showing the results of correct date and time values that you have recorded. Provide a brief description of each screen shot about the information it contains. Briefly describe the main steps that you think are necessary and important to locate date and time values while analysing the file.