Hello Reader,
It's that time again, Sunday Funday time! For those not familiar every Sunday I throw down the forensic gauntlet by asking a tough question. To the winner go the accolades of their peers and prizes hopefully worth the time they put into their answer. This week we have our first full image challenge and while I let people download it starting on Saturday I am going to extend this contest into Monday to give everyone time, so make sure to reread the rules!
The Prize:
The Challenge:
It's that time again, Sunday Funday time! For those not familiar every Sunday I throw down the forensic gauntlet by asking a tough question. To the winner go the accolades of their peers and prizes hopefully worth the time they put into their answer. This week we have our first full image challenge and while I let people download it starting on Saturday I am going to extend this contest into Monday to give everyone time, so make sure to reread the rules!
The Prize:
- A fully licensed copy of Arsenal Recon's Registry Recon! A prize worth $399!
The Rules:
- You must post your answer before Monday 9/16/13 5PM CST (GMT -5)
- The most complete answer wins
- You are allowed to edit your answer after posting
- If two answers are too similar for one to win, the one with the earlier posting time wins
- Be specific and be thoughtful
- Anonymous entries are allowed, please email them to dcowen@g-cpartners.com
- In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post
The Challenge:
An employee has left your employer and left to a competitor. You have been given an image of his system and are being asked to determine the following:
1. What devices were attached to his system
2. Was data transferred from this system?
3. What data was likely transferred and when?
4. How many different ways was data transferred from the system?
Good luck!
Download the image here if you haven't already: https://docs.google.com/file/d/0B_mjsPB8uKOAeFZTYzNJVXZ2c1E/edit?usp=sharing
