ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
Evidence TimelineCase Link/Suspect_Device.vhd
https://mega.nz/file/Wl9nVY4R#gkqZPrq5G2uVbdAOBtTJmHYD8u8komOkNj4xooCB67o
2
Case summary:
https://docs.google.com/document/d/1f9DR0ZLgi4JJd0gQdpjezq3jApPqaOXl/edit?usp=sharing&ouid=107898205580768769601&rtpof=true&sd=true
3
Reference:
Goal 17- Digital Forensics- E1T1 Merritt College Cyber Internship 2022
4
5
Date/TimeSuspect ActionAssets RequiredArtifacts CreatedWhere Artifacts CreatedStudent Steps/Tools
6

Day 1		Searching fake product from internetBrowserhttps://www.louisvuittonreplica.to/Web search historyAutopsy 4.18.0
7
Day 1Found website that selling fake luxury brand productBrowserhttps://www.louisvuittonreplica.to/product/neverfull-gm-beige/Web search historyAutopsy 4.18.0
8
Day 1Visited original LV web site to study price of original productBrowserhttps://us.louisvuitton.com/eng-us/products/neverfull-gm-damier-ebene-008115#N41357Web search historyAutopsy 4.18.0
9
Day 1Bought a fake product and got receipt downloadsPicture/pdf fileDownloads/documentAutopsy 4.18.0
10
Day 4search and downlaod original product imageBrowserPictureDownloadsAutopsy 4.18.0
11
Day 4Selling fake product on the websiteBrowserUrl/ email confirmationweb historyAutopsy 4.18.0
12
Day 5Communicated victim through emailEmailemailemailAutopsy 4.18.0
13
Day 5Received payment/ victim send receipt emailPicture/pdf fileemail/ downloadsAutopsy 4.18.0
14
Day 6Suspect send the fake product to victimemailPicture/pdf fileemailAutopsy 4.18.0
15
Day 6 Visited website that selling fake products again and purchase more fake productsbrowserPicture/pdf fileweb history/ downloadsAutopsy 4.18.0
16
Day 10Reposting selling fake product.browserUrl/ email confirmationweb historyAutopsy 4.18.0
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100