Erinevus lehekülje "Malware:ITX8042:2015:LAB2" redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
(Uus lehekülg: '== LAB 2 == ===Additional Reading + presentations!=== [https://docs.google.com/presentation/d/1pBPhAnQyTRVL7h7a37zayHx-pLWA8BAeiak2vvPHYH0/edit?usp=sharing Slides for lab] ...') |
|||
| 14. rida: | 14. rida: | ||
* Make an virtual image of the drive/card | * Make an virtual image of the drive/card | ||
* compute hash | * compute hash | ||
| − | * | + | * Use virtual image and restore files from there with photorec |
* Document the processs | * Document the processs | ||
Viimane redaktsioon: 18. september 2015, kell 08:47
LAB 2
Additional Reading + presentations!
Assignment
Find USB Thumb Drive or SD card (The smaller, the better- it takes less time to create an image of it). If it is a new drive/card copy some files there and then delete them.
For the actual lab:
* Make an virtual image of the drive/card
* compute hash
* Use virtual image and restore files from there with photorec
* Document the processs
Additional question: Provide a reasoning why to restore from image rather than from actual drive/card.
Upload the report to the moodle in time !