Recovering Graphics Files Lab Part 1
Video Activity
Computer Hacking and Forensics
CEU/CPE
Hey, everybody, welcome back to the course In the last video, we wrapped up our discussion and hard disk and file systems.
In this video, we're gonna go ahead and start our lab. So in this video, we'll download our USB file. We're also gonna go ahead and struck you as well.
So here at part one of our lab on step one, we're gonna log into the sovereign website. If you're not already loved in that, we're gonna click on catalogue at the top that we're in a search for the word forensic. So let's go ahead and do that now.
So I already loved into a cyber re. So go ahead, click on catalog.
And then on the left side here, you'll see the search box will search for the word forensic, so you don't have to capitalize it if you don't want to, you can type all over, case there,
and then you'll see if you pause for a second is gonna pull up all the search results.
So we're going to scroll down to Page and we're looking for this computer forensics and investigations. So let's go back to our lab document
so you'll see here and step for. We've found the computer forensics investigations, lab environment,
and now we're gonna go ahead and click on it.
So let's click on this start now, Button,
that's gonna launch the lab environment for us.
It might take a moment of soda launch for us.
So our next step here and step five, we wantto look for the recovering graphics files lab. So let's go ahead and scrolled on the page and look for that.
So this one right here, it's about 1/4 of the way down. It's a recovering graphics files lab.
Go ahead and click on that,
and then we're gonna click on the start burden as well.
All right, let's go back to our lab document.
So we've gone on step six here. We clicked on the start button after we've found that lab. And now our next step here. We want to go ahead and power on all the virtual machines. Now, I just want you to know that it might take 20 to 30 seconds. It probably won't be that long, but it depends on your particular computer.
Let's go ahead, Do that now. So just hover over top of him and then select this power on option to do that same process for every single one of these. Just cover your mouth over top click power on.
And same thing with this one here.
So you'll see those will go ahead and power on in the background for us. Let's go back to our lab document here.
All right? So, as I mentioned, I might take a few a few moments or so for the machines to turn on. Once they do, we want to go ahead and select that top machine that p lab win 8 10 machine on. And then from there, we're gonna go ahead and pull up the Internet Internet page. Excuse me. And then we're gonna download that USB file that I mentioned.
All right, so you'll see here P lab when a 10 has already booted up for us that other machines should boot up shortly. But you'll see it's gonna run through a few checks here, and then we'll be ableto go ahead and get started.
All right, so if we scroll down the page, we're looking for Internet Explorer. So we're gonna go ahead and click this icon on the task bar here
And what that's gonna do? Is this gonna take us to the intranet page? We scroll back up here. He was. You'll see we're at the intranet page.
Okay, so we've selected P lab when a 10 machine,
and now we're gonna go ahead and download the USB drive image. So we've already launched Internet Explorer and in step 11 has taken us to the Internet page.
So now we're gonna goto tools,
and then we're gonna select data forensics. So let's go ahead and do that.
So here on the internet page, go ahead and click on tools,
and then scroll down just a little bit and you'll see data forensics right here.
Go ahead and click on that.
All right. And then inside of there, you're going to see a file labeled as USB dot zip. So if you go back to our lab document, you'll see the Step 14 as we found us be dots it when we're gonna go ahead and click on it.
Once we click on it, we're gonna select save as to the little pop up box that we see,
And then we're gonna navigate to this location. So the C drive and then work
data files and then this Chapter eight folder and then we're gonna go ahead and say that, So let's go ahead and do that stuff now.
So back on our Internet page here,
we're gonna click on the USB dot zip file.
You'll see here it ask us if we want to download it or not,
and it's gonna ask us, Do we want to open it and save it? So if you remember from our lab document, once we click on it, we want to select save as that way we can determine where we want to save it, too.
Okay, so let's go ahead and do that now. So just click this little arrow kind of to the right of the safe box here, and you'll see a save as option.
So once we click that, it opens up a pop up box for us.
So again, here we want to navigate to see
work data files, and then Chapter eight.
What you'll notice here is we technically are already at the Data Files folder, and we could just click on data files
and go to Chapter eight. Or you could just get the practice of goingto the sea on the left side here, double clicking on work,
double clicking on data files and then double clicking on the chapter eight.
Either way is fine, whichever one you want to do again. You could you could have just click data files and then chosen chapter eight, and it would've been a little faster Way to get there.
All right, let's go back to our lab document here. So we've navigated to see the work folder, the data files folder, and then the chapter eight folder.
Now we're gonna click on safe, and once we do that, we'll see a pop up that ask us, Do we want to open the folder and we're gonna go ahead and open the folder?
So we're here, we're gonna click on safe.
It might take a moment or so here, but then you'll see we have an open folder option at the bottom here, go and click on that.
And then when we want to do is we want to right click on this USB and then extract it. So let's go back to our lab document
so you'll see her and step 19 we're gonna right click on the USB, and then we're gonna extract all now, in step 20 we're gonna keep the default file path that shows, and then we're just gonna basically extract it,
and then that's gonna complete part one of the lab.
All right, let's go ahead and do that now. So we're gonna right click on the folder.
We're gonna select Extract all it's gonna give us a default path was actually just gonna be in that same folder,
and then we're gonna click on extract
It's gonna take a moment of snow to do so. And you see, it kind of gives you a little green bar here to let you know that is completing.
Okay, once it does, it's gonna open it up for us.
All right, so now let's go back to our lab document here. So we've right clicked on the USB file, and we've extracted it, and we extracted into that default path again.
Now we're just gonna close all the folder windows and also Internet Explorer. So that way we can move on to our next step in the lab.
Let's go ahead and do that now, so just go ahead and excited all these
and same thing with Internet Explorer.
We'll close that as well.
All right, so now we're back at the main desk. Top screen for the P Lab. Win 8 10
All right, so in this lab, we just covered downloading, extracting the U. S. B file.
So the next lab, we're gonna go ahead and continue on with analyzing that USB.
Understanding the Digital Forensics Profession and Investigations
Processing Crime and Incident Scenes
Instructed By
Ken Underhill
Senior Instructor
To assess the strength of your organization's cybersecurity posture, you need to gather information, perform ...
Cybrary
7 CEU/CPE Hours Available
Certificate of Completion Offered
If you're interested in penetration testing and ethical hacking, then this Kali Linux course is ...
Computer Forensics and Investigations
Learn to determine potential online criminal activity at its inception, legally gather evidence, search and ...
Practice Labs