Digital Forensics 1

For this assignment you are tasked with looking into the iTunes backup image using the Reader tools shown in the iTunes forensics video. The files to do so are attached to this assignment and primarily you will select one particular artifact from the mobile image to dig into further. write up a short paper describing this artifact, any other important corresponding artifacts, and how they could be useful towards a case.

For this assignment you will pick a Linux forensic image that is linked below to pinpoint an artifact you may not find on a Windows machine or if you cannot access the forensic image please research some artifacts that could be found on a Linux machine and how they may differ from Windows. The page length should be 2 to 3 pages, if you wish to do more you can certainly do so.

Linux Image – https://linuxleo.com/Links to an external site. (found under Supplemental Files “Able3”)

Will need 7zip for extracting the contents from a tar.gz (https://www.7-zip.org/Links to an external site.)