Q1) You will leave your digital “clues” on a flash/thumb drive. Provide your thumb drive (containing your digital clues)
for analysis as an image by using software such as ProDiscover.
Include this screenshot in your final report!
Your digital clues must include at least one of each of the following:
– Hidden file
– Deleted file
– Graphic file
– Password-protected file
– Web access (browser history)
– Change extension of one file such as .docs to .pdf
Q2) Discuss what should you consider when determining which data acquisition method to use.
Q3) Discuss some options that can be used for preserving the data in this situation
Q4) Explain two acquisition methods that you should use in this situation.