Create a set of content that will combine into a single PowerPoint presentation to present your findings to your manager. The aim is to suggest a preferred route to support macOS and Linux investigations and to explore file formats used in your organization.
You need to reference and cite your sources and provide notes in the notes section provided below the slides in PowerPoint.
Part 1: Explore Forensics Tools for Mac and Linux Operating Systems
Research the forensics tools available for macOS and Linux. Then, prepare three to five slides that explain if these tools are similar to the Hex Workshop available for these operating systems. Based on their documentation, determine how easy validating these tools would be. Next, select at least two tools and describe what you would do to validate them based on what you have learned in this week’s textbook readings. Cite and reference your sources in the notes where you describe the details. These notes should be in the speaker-notes section provided below the slides within PowerPoint.
Part 2: Use the Hex Workshop to Explore Files
For this project, use HxD Hex Editor to become familiar with the content of different file types. Then, follow these steps on a Windows computer:
- On your hard drive, locate or create one file each of Microsoft Excel (.xls), Microsoft Word (.doc and .docx), .gif, and .jpg formats, and one movie format file of your choice (e.g., .avi, .wmf, .mp4, .mov, etc.).
- Start HxD Hex Editor.
- Open each file by clicking File, and then Open from the menu.
- Use the Snipping Tool or an image capture program such as SnagIt or ScreenshotCaptor, to copy an image of the HxD Hex Editor frame.
- Use the Search function to search for the file type within the file (e.g., .jpg, .doc, etc.). Use your mouse to highlight the text string in the column on the right, and then note how the hexadecimal values in the file are also highlighted in the center area. On each screen image, use the annotation tools of your capture software to circle or highlight the item that identifies the file type. Do this for all five file types.
- Copy each of the images to the computer Clipboard, and then paste them into your PowerPoint file. Next, label each image and provide the full file name and a summary of your findings in the notes section below the slide.
- Conclude this section with a further slide providing a brief summary of the similarities and differences you observed in the contents of each file type. Include notes below the slide(s).
- Exit HxD Hex Editor.
Provide a PowerPoint file with slides that are appropriate for a verbal delivery to your manager. Below the content slides, provide notes to provide a formal record for your manager. There should be a title slide, an objective slide, a section header plus three to five content slides for Part 1, a section header plus four to eight slides for the Part 2, a conclusion, and a reference slide with your references provided in 12-point fonts. For content slides provide 150 to 250 words of content in the speaker-notes section below each slide.
References: Cite and reference all sources used to create your assignment, note that software tools also require citations and references.