Malware:ITX8042:2014:LAB4

LAB4

Additional Reading + presentations!

Slides for lab

Assignment

Find USB Thumb Drive or SD card (The smaller, the better- it takes less time to create an image of it). If it is a new drive/card copy some files there and then delete them.

For the actual lab:

	* Make  an virtual image of the drive/card
	* Restore data from the virtual image
	* Document the processs

Additional question: Provide a reasoning why to restore from image rather than from actual drive/card.