Leaking private company data (again) (Autopsy)¶

What is the name of an Installed Program with the version number of 6.2.0.2962?

A user has a Password Hint. What is the value?

Numerous SECRET files were accessed from a network drive. What was the IP address?

What web search term has the most entries?

What was the web search conducted on 3/25/2015 21:46:44?

What MD5 hash value of the binary is listed as an Interesting File?

What self-assuring message did the ‘Informant’ write for himself on a Sticky Note? (no spaces)

Using the Timeline, how many results were there on 2015-01-12?

The majority of file events occurred on what date? (MONTH DD, YYYY)

Resources¶

• Autopsy User Documentation