±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 33814
New Yesterday: 10 Visitors: 213

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Need help with my Assignment!

Computer forensics training and education issues. If you are looking for topic suggestions for your project, thesis or dissertation please post here rather than the general discussion forum.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2, 3, 4  Next 
  

Need help with my Assignment!

Post Posted: Mon Jan 15, 2018 12:18 am

Hi would like to ask if there's any expert out there can help me out with this assignment that i can't seems to decrypt.

I was given an disk image and asked to decrypt it to see what's inside, once i open the folder there's 2 files ad1 and ad2. and was given afew softwares to work with it, like OSforensics, Prodiscover, Winhex. i was told that need to decrypt and combined the 2 files in order to get the original disk image file.

here are the screenshots of the files
imgur.com/a/Zj9d8

Anyone can help me with it?  

Nephalem
Member
 
 
  

Re: Need help with my Assignment!

Post Posted: Mon Jan 15, 2018 4:33 am

- Nephalem
Hi would like to ask if there's any expert out there can help me out with this assignment that i can't seems to decrypt.

I was given an disk image and asked to decrypt it to see what's inside, once i open the folder there's 2 files ad1 and ad2. and was given afew softwares to work with it, like OSforensics, Prodiscover, Winhex. i was told that need to decrypt and combined the 2 files in order to get the original disk image file.

here are the screenshots of the files
imgur.com/a/Zj9d8

Anyone can help me with it?


Most probably a lot of people would be able to help you with that, the point is more about whether they will.

From a merely ethical standpoint, doing (or helping you do) your homework would be a little like being accomplices in"cheating".

Now if you have specific questions or doubts, that is another thing.

What have you done till now?
In which way what you actually did was different from what you expected to happen?

What I would do first thing would be to open the file(s) with Winhex (or other hex editor) to see if there is any recognizable pattern in the file, possibly hinting at which kind of encryption (if any[1]) has been used, if there is any recognizable header leading to a known file format, etc..

jaclaz

[1] The assignment task doesn't mention encryption
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Need help with my Assignment!

Post Posted: Mon Jan 15, 2018 6:57 am

Two questions: are you a student?
What are you studying?
Politics, Medicine or something related to IT (Forensics)?  

Bunnysniper
Senior Member
 
 
  

Re: Need help with my Assignment!

Post Posted: Wed Jan 17, 2018 11:45 am

Hi thanks for the reply, I haven't really started as i really have no idea how to do it. decrypting this 2 files are probably just less then 5% of the total work of what i purpose to do.
But i just need help on solving and opening up this 2 files and i will be able to do the rest myself, the rest of the assignment is basically just open up the files and do case studies, collect evidence and to write out an report of 3000 words with it.
But i already having issue of opening this 2 files, so technically i can't really do anything right now.



- jaclaz
- Nephalem
Hi would like to ask if there's any expert out there can help me out with this assignment that i can't seems to decrypt.

I was given an disk image and asked to decrypt it to see what's inside, once i open the folder there's 2 files ad1 and ad2. and was given afew softwares to work with it, like OSforensics, Prodiscover, Winhex. i was told that need to decrypt and combined the 2 files in order to get the original disk image file.

here are the screenshots of the files
imgur.com/a/Zj9d8

Anyone can help me with it?


Most probably a lot of people would be able to help you with that, the point is more about whether they will.

From a merely ethical standpoint, doing (or helping you do) your homework would be a little like being accomplices in"cheating".

Now if you have specific questions or doubts, that is another thing.

What have you done till now?
In which way what you actually did was different from what you expected to happen?

What I would do first thing would be to open the file(s) with Winhex (or other hex editor) to see if there is any recognizable pattern in the file, possibly hinting at which kind of encryption (if any[1]) has been used, if there is any recognizable header leading to a known file format, etc..

jaclaz

[1] The assignment task doesn't mention encryption
 

Nephalem
Member
 
 
  

Re: Need help with my Assignment!

Post Posted: Wed Jan 17, 2018 11:46 am

Yes i am an student, currently majoring in computer forensics

- Bunnysniper
Two questions: are you a student?
What are you studying?
Politics, Medicine or something related to IT (Forensics)?
 

Nephalem
Member
 
 
  

Re: Need help with my Assignment!

Post Posted: Thu Jan 18, 2018 6:59 am

What happens when you open the AD1 file within FTK Imager?

File > Add Evidence > Image File > Select AD1  

MrMacca
Member
 
 
  

Re: Need help with my Assignment!

Post Posted: Thu Jan 18, 2018 7:22 am

imgur.com/a/tc3PI
Hi, this is what happened when i used it on FTK imager, I not sure what to do next

- MrMacca
What happens when you open the AD1 file within FTK Imager?

File > Add Evidence > Image File > Select AD1
 

Nephalem
Member
 
 

Page 1 of 4
Go to page 1, 2, 3, 4  Next