ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
Evidence TimelineCase summary:
https://ccperalta-my.sharepoint.com/:u:/g/personal/10922296_cc_peralta_edu/EcOQpVppxztLjwEvf7IJEhcBAF953ScFBSrK2qQVzq7Mcg?e=fEcF8r
2
Reference:
Goal 17- Digital Forensics- E1T1 Merritt College Cyber Internship 2022
3
CIS060 Forensics 2021 Final Case Description
4
5
Date/TimeSuspect A ActionAssets RequiredDeveloper prep stepsDevice Artifacts CreatedWhere Device Artifacts CreatedStudent Steps/ToolsStudent keyApplicable Netlabs 1Applicable Netlabs 2Applicable Netlabs 3outside Netlabs
6

2021-03-23 02:46:22 PDT
Create first user account on the actual device(2 active user account) Operating system user account"-9223372036854771566" Actual laptopAutopsy 4.18.0
7

2021-03-23 02:56:58 PDT
Used Vmware USB device attached"-9223372036854771551 " Actual laptopAutopsy 4.18.0
8

2021-03-23 03:01:23 PDT
Searched about credit card
Web artifacts(History, Cache, Searches)
Used account name:
hacker Jack
Autopsy 4.18.0
9

2021-03-23 03:03:47 PDT
Searched about free encrypted email (tutanota secure email service)
Web artifacts(History, Cache, Searches),
downloads
Used account name:
hacker Jack
Autopsy 4.18.0
10

2021-03-23 03:11:57 PDT
Searched Credit card writer
Web artifacts(History, Cache, Searches)
Used account name:
shadowman
Autopsy 4.18.0
11

2021-03-23 03:15:24 PDT
Bought MSR650 magnetic stripe card reader writer encoder
Web artifacts(History, Cache, Searches)
Used account name:
shadowman
Autopsy 4.18.0
12

2021-03-23 03:13:56 PDT
Searched about how to anonymously buy and do things on online
Web artifacts(History, Cache, Searches)
Used account name:
shadowman
Autopsy 4.18.0
13

2021-03-23 03:18:55 PDT
Downloaded CommonThief MSR(credit card parser) Web artifacts(History, Cache, Searches),
downloads
Used account name:
shadowman
Autopsy 4.18.0
14

2021-03-23 03:22:24 PDT
visited pastebin.com(credit card dump)
Web artifacts(History, Cache, Searches)
Used account name:
shadowman
Autopsy 4.18.0
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100