Day Topics Assignments
1

Chapter 1
Links and Other Info
Syllabus

 Ch. 1: 5,6,7,9,10,12,15,17,18
Proj. 1-3
Proj. 1-4 (2 or 3 paragraphs is fine)
Proj. 1-5 (2 or 3 paragraphs is fine)
Proj. 1-8
2
 Chapter 2

Perform this Setup
Ch. 2: 1, 3, 4, 8, 9, 12, 13, 18, 19, 20
Proj. 2-1 (C2Prj01.img)
Proj. 2-2 (C2Prj02a..img) NOTES FOR 2-2

3
 Video Part 1 Proj. 2-3 (Skip #6-10)
Proj. 2-4
4
 Video Part 2 Proj. 2-5 (CrPrj05.img)
For #7, use File->Add Evidence->Logical Drive
and one thing missing from the instructions in #7 is that you should use FTK imager to export the disk you read in to another image.
Proj. 2-6 (CrPrj06.1)
For #6, choose "Acquired image of drive" instead of the option they tell you to choose.
5
 Chapter 4

Ch. 4: 1, 3, 5, 6, 7, 9, 10, 12, 16, 18
Proj. 4-3 (hex workshop)
Proj. 4-4
Proj. 4-5 (C4Prj03.img)

6
 Chapter 6

Ch. 6: 2, 3, 5, 7, 9, 10, 11, 12, 14
Proj. 6-1
Case Project 6-5 (Not Proj. 6-5!!)

7
 Chapter 3,7,10 (Parts of each) Ch. 3: 1, 6, 7, 8, 10, 14, 17
Proj. 7-3(You'll need a bootdisk)
Proj. 10-4 (Use Windows Paint for the image viewer, S-Tools)
8
 Chapter 11
 Ch. 11: 1, 2, 5, 6, 7, 9,12, 13, 15, 20
Proj. 11-3
Proj. 11-4
Proj. 11-5 (RUSHMORE.bmp, Findme.txt)
Proj. 11-6 (jazztstage.bmp)
Carving example
9
 Chapter 13 Ch. 13: 1, 4, 5, 6, 8, 10, 12, 13, 14, 15, 16, 17, 19
Proj. 13-2
Proj. 13-3
Proj. 13-5 (badguy.wab)
Proj. 13-6 (Jim_shu.pst)
Case Proj. 13-2 (Use email emphasis! - kidnapping.zip)
10
 Certification Day + Exam