Assignment 1b: Data Preparation, Data Acquisition,Data Analysis and Data ValidationThe objective of assignment part b is to acquire data from a drive, perform data recovery usingdifferent techniques...

Assignment 1b: Data Preparation, Data Acquisition,Data Analysis and Data ValidationThe objective of assignment part b is to acquire data from a drive, perform data recovery usingdifferent techniques and tools, analysing it and finally performing the validation of acquired data. Inaddition, students are required to properly document all steps in a report, the report should beformal so that it can be used in a legal process. Prepare a report on the following sections:Section 1: DataPreparationYou need a USB; it is expected to have very important information related to the case. The USBcontains several Excel files, a couple of image files and some text files. You need to use your own USBto create and delete files as the following:MN624 Digital Forensic3of 7Prepared by: Dr.Ammar AlazabModerated by: Dr. Ajay Shiv Sharma July, 20211. On your USB drive, create a word file named your Student ID, where the blank should be filledwith your name, mobile, citizen, address and some other information.The file should contain the following sentence: “I have enrolled for MN624 Digital Forensic T22021.”The first blank in the sentence should be filled in with your Full name and the second blankwith the date when you registered for this unit.2. On the same drive, create an excel file named “StudentID.xls”, where the First column should befilled with your unit’s name that you had at MIT last semester and the second column should befilled with your marks with those units.3. Modify the extension of one of the doc file to .jpeg.4. Create a password word document. Hint. Click the File menu, select the Info tab, and then selectthe Protect Document button. Click Encrypt with Password. Enter your password then click OK.Enter the password again to confirm it and click OK.5. Store your current Photo on a USB drive and save it in JPG format or other images format.6. Take a screenshot of your Windows Explorer window showing the content of the USB’s folderhosting the three files. Include this screenshot in your final report!7. Now delete those files including the file you have modified its extension, and then take anotherscreenshot.Section 2: Data AcquisitionPrepare a forensic image (bit stream copy) with the record of data deletion. Explain the methodand tool you used for acquiring data. You will need this image to perform consecutive tasks.Use two computer forensics tools from table 1 to Acquire an Image of a USB Drive. In the report,you need to include the screenshots of each step.Section 3: Data RecoveryThe suspect has deleted two image files from the USB, recover the files and explain the method (withscreenshots) and tool you used. Use two computer forensics tools from table 1 to Recover DeletedImages and to verify which files have changed of extension. In the report, you need to include thescreenshots of each step.Section 4: Data AnalysisInspect all files in the USB, use a hex editor and analyse if there is any hidden data in files. Providescreenshots of your analysis. Discuss what techniques and tools that can be used to recover thepasswords. Use one of these techniques to recover the passwords from the protected files.Section 5: Data ValidationExplain different methods of data validation and use one of them to validate data on USB.Section 4: Comparison of the digital forensics toolsComparison of the digital forensics tools that you used in this work. Your comparison couldinclude:-Digital forensics features-Time is taken to detect acquire threat-Ease of usageMN624 Digital Forensic4of 7Prepared by: Dr.Ammar AlazabModerated by: Dr. Ajay Shiv Sharma July, 2021Table 1: Digital forensics Tools (You can choose any two tools for your demonstration with yourtutor’s consent)

Serial #	Name of the security tool
1	Pro Discover Basic
2	FTK Imager
3	X-Ways Forensics
4	CAINE (Computer Aided Investigative Environment)
5	OSForensics
6	Autopsy
7	Sleuth Kit