diff --git a/FSCS727_Forensics/Labs/Email_Investigation/Email_forensics.pptx b/FSCS727_Forensics/Labs/10_Email_Investigation/Email_forensics.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Email_Investigation/Email_forensics.pptx rename to FSCS727_Forensics/Labs/10_Email_Investigation/Email_forensics.pptx diff --git a/FSCS727_Forensics/Labs/Email_Investigation/header_outlook.txt b/FSCS727_Forensics/Labs/10_Email_Investigation/header_outlook.txt similarity index 100% rename from FSCS727_Forensics/Labs/Email_Investigation/header_outlook.txt rename to FSCS727_Forensics/Labs/10_Email_Investigation/header_outlook.txt diff --git a/FSCS727_Forensics/Labs/Email_Investigation/nps-2008-jean_outlook.pst b/FSCS727_Forensics/Labs/10_Email_Investigation/nps-2008-jean_outlook.pst similarity index 100% rename from FSCS727_Forensics/Labs/Email_Investigation/nps-2008-jean_outlook.pst rename to FSCS727_Forensics/Labs/10_Email_Investigation/nps-2008-jean_outlook.pst diff --git a/FSCS727_Forensics/Labs/Email_Investigation/~$Email_forensics.pptx b/FSCS727_Forensics/Labs/10_Email_Investigation/~$Email_forensics.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Email_Investigation/~$Email_forensics.pptx rename to FSCS727_Forensics/Labs/10_Email_Investigation/~$Email_forensics.pptx diff --git a/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/VolatilityCheatSheet.pdf b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/VolatilityCheatSheet.pdf similarity index 100% rename from FSCS727_Forensics/Labs/Volatile_Memory_Forensics/VolatilityCheatSheet.pdf rename to FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/VolatilityCheatSheet.pdf diff --git a/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx rename to FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx diff --git a/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab_2.pptx b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Window_memory_forensics_lab_2.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab_2.pptx rename to FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Window_memory_forensics_lab_2.pptx diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.001 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.001 new file mode 100644 index 0000000..ae0ddab --- /dev/null +++ b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.001 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:31461fb07f961ec2cd63dc3ed757dffe8653f187e0e94453f10f18c5fcaa5170 +size 20971520 diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.002 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.002 new file mode 100644 index 0000000..f9e69f1 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.002 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.003 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.003 new file mode 100644 index 0000000..88105c5 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.003 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.004 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.004 new file mode 100644 index 0000000..7f289ae Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.004 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.005 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.005 new file mode 100644 index 0000000..4cd274c Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.005 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.006 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.006 new file mode 100644 index 0000000..703b832 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.006 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.007 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.007 new file mode 100644 index 0000000..3fb3a3e Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.007 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.008 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.008 new file mode 100644 index 0000000..c7ccf99 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.008 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.009 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.009 new file mode 100644 index 0000000..f87ca71 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.009 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.010 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.010 new file mode 100644 index 0000000..f7b7370 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.010 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.011 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.011 new file mode 100644 index 0000000..8c14b7a Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.011 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.012 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.012 new file mode 100644 index 0000000..4ef0672 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.012 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.013 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.013 new file mode 100644 index 0000000..785f655 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.013 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.014 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.014 new file mode 100644 index 0000000..7f5729d Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.014 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.015 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.015 new file mode 100644 index 0000000..e94c1b6 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.015 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.016 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.016 new file mode 100644 index 0000000..0bf1c1d Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.016 differ diff --git a/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.017 b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.017 new file mode 100644 index 0000000..40bc632 Binary files /dev/null and b/FSCS727_Forensics/Labs/11_Volatile_Memory_Forensics/Windows7/Windows7_X86_1G.zip.017 differ diff --git a/FSCS727_Forensics/Labs/VM_Santoku_Installation/Santoku_Installation_Manual.pptx b/FSCS727_Forensics/Labs/12_1_VM_Santoku_Installation/Santoku_Installation_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/VM_Santoku_Installation/Santoku_Installation_Manual.pptx rename to FSCS727_Forensics/Labs/12_1_VM_Santoku_Installation/Santoku_Installation_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Mobile_Forensics/Android_Forensics_Santoku_Manual.pptx b/FSCS727_Forensics/Labs/12_2_Mobile_Forensics/Android_Forensics_Santoku_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Mobile_Forensics/Android_Forensics_Santoku_Manual.pptx rename to FSCS727_Forensics/Labs/12_2_Mobile_Forensics/Android_Forensics_Santoku_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Mobile_Forensics/Android_Forensics_Santoku_Manual_2.pptx b/FSCS727_Forensics/Labs/12_2_Mobile_Forensics/Android_Forensics_Santoku_Manual_2.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Mobile_Forensics/Android_Forensics_Santoku_Manual_2.pptx rename to FSCS727_Forensics/Labs/12_2_Mobile_Forensics/Android_Forensics_Santoku_Manual_2.pptx diff --git a/FSCS727_Forensics/Labs/Mobile_Forensics/viaForensics-AppSecUSA-Nov-2013.pdf b/FSCS727_Forensics/Labs/12_2_Mobile_Forensics/viaForensics-AppSecUSA-Nov-2013.pdf similarity index 100% rename from FSCS727_Forensics/Labs/Mobile_Forensics/viaForensics-AppSecUSA-Nov-2013.pdf rename to FSCS727_Forensics/Labs/12_2_Mobile_Forensics/viaForensics-AppSecUSA-Nov-2013.pdf diff --git a/FSCS727_Forensics/Labs/BasicComptuerSkills/Windows_Command_Prompts.pptx b/FSCS727_Forensics/Labs/1_BasicComptuerSkills_Windows/Windows_Command_Prompts.pptx similarity index 100% rename from FSCS727_Forensics/Labs/BasicComptuerSkills/Windows_Command_Prompts.pptx rename to FSCS727_Forensics/Labs/1_BasicComptuerSkills_Windows/Windows_Command_Prompts.pptx diff --git a/FSCS727_Forensics/Labs/VM_Windows_Installation/Windows_10__Installation_Manual.pptx b/FSCS727_Forensics/Labs/2_1_VM_Windows_Installation/Windows_10__Installation_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/VM_Windows_Installation/Windows_10__Installation_Manual.pptx rename to FSCS727_Forensics/Labs/2_1_VM_Windows_Installation/Windows_10__Installation_Manual.pptx diff --git a/FSCS727_Forensics/Labs/VM_Kali_Installation/Kali_Installation_Manual.pptx b/FSCS727_Forensics/Labs/2_2_VM_Kali_Installation/Kali_Installation_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/VM_Kali_Installation/Kali_Installation_Manual.pptx rename to FSCS727_Forensics/Labs/2_2_VM_Kali_Installation/Kali_Installation_Manual.pptx diff --git a/FSCS727_Forensics/Labs/BasicComptuerSkills/Advanced_Linux_Commands.pptx b/FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Advanced_Linux_Commands.pptx similarity index 100% rename from FSCS727_Forensics/Labs/BasicComptuerSkills/Advanced_Linux_Commands.pptx rename to FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Advanced_Linux_Commands.pptx diff --git a/FSCS727_Forensics/Labs/BasicComptuerSkills/Linux_Commands.pptx b/FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Linux_Commands.pptx similarity index 100% rename from FSCS727_Forensics/Labs/BasicComptuerSkills/Linux_Commands.pptx rename to FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Linux_Commands.pptx diff --git a/FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Windows_Command_Prompts.pptx b/FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Windows_Command_Prompts.pptx new file mode 100644 index 0000000..294646c Binary files /dev/null and b/FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/Windows_Command_Prompts.pptx differ diff --git a/FSCS727_Forensics/Labs/BasicComptuerSkills/netcat_cheat_sheet_v1.pdf b/FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/netcat_cheat_sheet_v1.pdf similarity index 100% rename from FSCS727_Forensics/Labs/BasicComptuerSkills/netcat_cheat_sheet_v1.pdf rename to FSCS727_Forensics/Labs/2_3_BasicComptuerSkills - Linux/netcat_cheat_sheet_v1.pdf diff --git a/FSCS727_Forensics/Labs/Introduction_Digital_Forensics/Ch01InChap01.dd b/FSCS727_Forensics/Labs/3_Introduction_Digital_Forensics/Ch01InChap01.dd similarity index 100% rename from FSCS727_Forensics/Labs/Introduction_Digital_Forensics/Ch01InChap01.dd rename to FSCS727_Forensics/Labs/3_Introduction_Digital_Forensics/Ch01InChap01.dd diff --git a/FSCS727_Forensics/Labs/Introduction_Digital_Forensics/Forensics_Introduction.pptx b/FSCS727_Forensics/Labs/3_Introduction_Digital_Forensics/Forensics_Introduction.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Introduction_Digital_Forensics/Forensics_Introduction.pptx rename to FSCS727_Forensics/Labs/3_Introduction_Digital_Forensics/Forensics_Introduction.pptx diff --git a/FSCS727_Forensics/Labs/Acquistion_USB/Forensic_Acquistion_USB_Lab_Manul.pptx b/FSCS727_Forensics/Labs/4_Acquistion_USB/Forensic_Acquistion_USB_Lab_Manul.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Acquistion_USB/Forensic_Acquistion_USB_Lab_Manul.pptx rename to FSCS727_Forensics/Labs/4_Acquistion_USB/Forensic_Acquistion_USB_Lab_Manul.pptx diff --git a/FSCS727_Forensics/Labs/Acquistion_USB/~$Forensic_Acquistion_USB_Lab_Manul.pptx b/FSCS727_Forensics/Labs/4_Acquistion_USB/~$Forensic_Acquistion_USB_Lab_Manul.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Acquistion_USB/~$Forensic_Acquistion_USB_Lab_Manul.pptx rename to FSCS727_Forensics/Labs/4_Acquistion_USB/~$Forensic_Acquistion_USB_Lab_Manul.pptx diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/Window_FileSys_FAT_Lab_Manual.pptx b/FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/Window_FileSys_FAT_Lab_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_FAT/Window_FileSys_FAT_Lab_Manual.pptx rename to FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/Window_FileSys_FAT_Lab_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001 b/FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat16_250m.001 similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001 rename to FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat16_250m.001 diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001.txt b/FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat16_250m.001.txt similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001.txt rename to FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat16_250m.001.txt diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat32.001 b/FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat32.001 similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat32.001 rename to FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat32.001 diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat32.001.txt b/FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat32.001.txt similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat32.001.txt rename to FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/fat32.001.txt diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/~$Window_FileSys_FAT_Lab_Manual.pptx b/FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/~$Window_FileSys_FAT_Lab_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_FAT/~$Window_FileSys_FAT_Lab_Manual.pptx rename to FSCS727_Forensics/Labs/5_1_Windows_FileSys_FAT/~$Window_FileSys_FAT_Lab_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_NTFS/NTFS.001 b/FSCS727_Forensics/Labs/5_2_Windows_FileSys_NTFS/NTFS.001 similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_NTFS/NTFS.001 rename to FSCS727_Forensics/Labs/5_2_Windows_FileSys_NTFS/NTFS.001 diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_NTFS/NTFS.001.txt b/FSCS727_Forensics/Labs/5_2_Windows_FileSys_NTFS/NTFS.001.txt similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_NTFS/NTFS.001.txt rename to FSCS727_Forensics/Labs/5_2_Windows_FileSys_NTFS/NTFS.001.txt diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_NTFS/Window_FileSys_NTFS_Lab_Manual.pptx b/FSCS727_Forensics/Labs/5_2_Windows_FileSys_NTFS/Window_FileSys_NTFS_Lab_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Windows_FileSys_NTFS/Window_FileSys_NTFS_Lab_Manual.pptx rename to FSCS727_Forensics/Labs/5_2_Windows_FileSys_NTFS/Window_FileSys_NTFS_Lab_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Windows_Registry/Devon_NTUSER.DAT b/FSCS727_Forensics/Labs/6_Windows_Registry/Devon_NTUSER.DAT similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/Devon_NTUSER.DAT rename to FSCS727_Forensics/Labs/6_Windows_Registry/Devon_NTUSER.DAT diff --git a/FSCS727_Forensics/Labs/Windows_Registry/How to Show Hidden Files in Windows 10.pdf b/FSCS727_Forensics/Labs/6_Windows_Registry/How to Show Hidden Files in Windows 10.pdf similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/How to Show Hidden Files in Windows 10.pdf rename to FSCS727_Forensics/Labs/6_Windows_Registry/How to Show Hidden Files in Windows 10.pdf diff --git a/FSCS727_Forensics/Labs/Windows_Registry/Jean_NTUSER.DAT b/FSCS727_Forensics/Labs/6_Windows_Registry/Jean_NTUSER.DAT similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/Jean_NTUSER.DAT rename to FSCS727_Forensics/Labs/6_Windows_Registry/Jean_NTUSER.DAT diff --git a/FSCS727_Forensics/Labs/Windows_Registry/SAM b/FSCS727_Forensics/Labs/6_Windows_Registry/SAM similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/SAM rename to FSCS727_Forensics/Labs/6_Windows_Registry/SAM diff --git a/FSCS727_Forensics/Labs/Windows_Registry/SECURITY b/FSCS727_Forensics/Labs/6_Windows_Registry/SECURITY similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/SECURITY rename to FSCS727_Forensics/Labs/6_Windows_Registry/SECURITY diff --git a/FSCS727_Forensics/Labs/Windows_Registry/Window_Registry_Lab_Manul.pptx b/FSCS727_Forensics/Labs/6_Windows_Registry/Window_Registry_Lab_Manul.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/Window_Registry_Lab_Manul.pptx rename to FSCS727_Forensics/Labs/6_Windows_Registry/Window_Registry_Lab_Manul.pptx diff --git a/FSCS727_Forensics/Labs/Windows_Registry/administrator_NTUSER.DAT b/FSCS727_Forensics/Labs/6_Windows_Registry/administrator_NTUSER.DAT similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/administrator_NTUSER.DAT rename to FSCS727_Forensics/Labs/6_Windows_Registry/administrator_NTUSER.DAT diff --git a/FSCS727_Forensics/Labs/Windows_Registry/default b/FSCS727_Forensics/Labs/6_Windows_Registry/default similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/default rename to FSCS727_Forensics/Labs/6_Windows_Registry/default diff --git a/FSCS727_Forensics/Labs/Windows_Registry/default_NTUSER.DAT b/FSCS727_Forensics/Labs/6_Windows_Registry/default_NTUSER.DAT similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/default_NTUSER.DAT rename to FSCS727_Forensics/Labs/6_Windows_Registry/default_NTUSER.DAT diff --git a/FSCS727_Forensics/Labs/Windows_Registry/software b/FSCS727_Forensics/Labs/6_Windows_Registry/software similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/software rename to FSCS727_Forensics/Labs/6_Windows_Registry/software diff --git a/FSCS727_Forensics/Labs/Windows_Registry/system b/FSCS727_Forensics/Labs/6_Windows_Registry/system similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/system rename to FSCS727_Forensics/Labs/6_Windows_Registry/system diff --git a/FSCS727_Forensics/Labs/Windows_Registry/~$Window_Registry_Lab_Manul.pptx b/FSCS727_Forensics/Labs/6_Windows_Registry/~$Window_Registry_Lab_Manul.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Windows_Registry/~$Window_Registry_Lab_Manul.pptx rename to FSCS727_Forensics/Labs/6_Windows_Registry/~$Window_Registry_Lab_Manul.pptx diff --git a/FSCS727_Forensics/Labs/File_Carving/CarvedImage.jpg b/FSCS727_Forensics/Labs/7_File_Carving/CarvedImage.jpg similarity index 100% rename from FSCS727_Forensics/Labs/File_Carving/CarvedImage.jpg rename to FSCS727_Forensics/Labs/7_File_Carving/CarvedImage.jpg diff --git a/FSCS727_Forensics/Labs/File_Carving/File_Carving.pptx b/FSCS727_Forensics/Labs/7_File_Carving/File_Carving.pptx similarity index 100% rename from FSCS727_Forensics/Labs/File_Carving/File_Carving.pptx rename to FSCS727_Forensics/Labs/7_File_Carving/File_Carving.pptx diff --git a/FSCS727_Forensics/Labs/File_Carving/File_carving.docx b/FSCS727_Forensics/Labs/7_File_Carving/File_carving.docx similarity index 100% rename from FSCS727_Forensics/Labs/File_Carving/File_carving.docx rename to FSCS727_Forensics/Labs/7_File_Carving/File_carving.docx diff --git a/FSCS727_Forensics/Labs/File_Carving/i-love-cats-cute-cats.jpg b/FSCS727_Forensics/Labs/7_File_Carving/i-love-cats-cute-cats.jpg similarity index 100% rename from FSCS727_Forensics/Labs/File_Carving/i-love-cats-cute-cats.jpg rename to FSCS727_Forensics/Labs/7_File_Carving/i-love-cats-cute-cats.jpg diff --git a/FSCS727_Forensics/Labs/Steganography/GIFutil.dll b/FSCS727_Forensics/Labs/8_Steganography/GIFutil.dll similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/GIFutil.dll rename to FSCS727_Forensics/Labs/8_Steganography/GIFutil.dll diff --git a/FSCS727_Forensics/Labs/Steganography/S-Tools.exe b/FSCS727_Forensics/Labs/8_Steganography/S-Tools.exe similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/S-Tools.exe rename to FSCS727_Forensics/Labs/8_Steganography/S-Tools.exe diff --git a/FSCS727_Forensics/Labs/Steganography/S-Tools.hlp b/FSCS727_Forensics/Labs/8_Steganography/S-Tools.hlp similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/S-Tools.hlp rename to FSCS727_Forensics/Labs/8_Steganography/S-Tools.hlp diff --git a/FSCS727_Forensics/Labs/Steganography/_Steganography_S-Tool_Lab_Manual.pptx b/FSCS727_Forensics/Labs/8_Steganography/_Steganography_S-Tool_Lab_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/_Steganography_S-Tool_Lab_Manual.pptx rename to FSCS727_Forensics/Labs/8_Steganography/_Steganography_S-Tool_Lab_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Steganography/_company_secret.TXT b/FSCS727_Forensics/Labs/8_Steganography/_company_secret.TXT similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/_company_secret.TXT rename to FSCS727_Forensics/Labs/8_Steganography/_company_secret.TXT diff --git a/FSCS727_Forensics/Labs/Steganography/_tower_original_image_for_lab.bmp b/FSCS727_Forensics/Labs/8_Steganography/_tower_original_image_for_lab.bmp similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/_tower_original_image_for_lab.bmp rename to FSCS727_Forensics/Labs/8_Steganography/_tower_original_image_for_lab.bmp diff --git a/FSCS727_Forensics/Labs/Steganography/cryptlib.dll b/FSCS727_Forensics/Labs/8_Steganography/cryptlib.dll similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/cryptlib.dll rename to FSCS727_Forensics/Labs/8_Steganography/cryptlib.dll diff --git a/FSCS727_Forensics/Labs/Steganography/zlib.dll b/FSCS727_Forensics/Labs/8_Steganography/zlib.dll similarity index 100% rename from FSCS727_Forensics/Labs/Steganography/zlib.dll rename to FSCS727_Forensics/Labs/8_Steganography/zlib.dll diff --git a/FSCS727_Forensics/Labs/Recover_Graphics/C08InChp.dd b/FSCS727_Forensics/Labs/9_Recover_Graphics/C08InChp.dd similarity index 100% rename from FSCS727_Forensics/Labs/Recover_Graphics/C08InChp.dd rename to FSCS727_Forensics/Labs/9_Recover_Graphics/C08InChp.dd diff --git a/FSCS727_Forensics/Labs/Recover_Graphics/Death-Valley-JPEG_JFIF.jpg b/FSCS727_Forensics/Labs/9_Recover_Graphics/Death-Valley-JPEG_JFIF.jpg similarity index 100% rename from FSCS727_Forensics/Labs/Recover_Graphics/Death-Valley-JPEG_JFIF.jpg rename to FSCS727_Forensics/Labs/9_Recover_Graphics/Death-Valley-JPEG_JFIF.jpg diff --git a/FSCS727_Forensics/Labs/Recover_Graphics/Death-Valley_JPEG_Exif.jpg b/FSCS727_Forensics/Labs/9_Recover_Graphics/Death-Valley_JPEG_Exif.jpg similarity index 100% rename from FSCS727_Forensics/Labs/Recover_Graphics/Death-Valley_JPEG_Exif.jpg rename to FSCS727_Forensics/Labs/9_Recover_Graphics/Death-Valley_JPEG_Exif.jpg diff --git a/FSCS727_Forensics/Labs/Recover_Graphics/Recover_Graphic_Lab_Manual.pptx b/FSCS727_Forensics/Labs/9_Recover_Graphics/Recover_Graphic_Lab_Manual.pptx similarity index 100% rename from FSCS727_Forensics/Labs/Recover_Graphics/Recover_Graphic_Lab_Manual.pptx rename to FSCS727_Forensics/Labs/9_Recover_Graphics/Recover_Graphic_Lab_Manual.pptx diff --git a/FSCS727_Forensics/Labs/Recover_Graphics/content_example_ibiza.jpg b/FSCS727_Forensics/Labs/9_Recover_Graphics/content_example_ibiza.jpg similarity index 100% rename from FSCS727_Forensics/Labs/Recover_Graphics/content_example_ibiza.jpg rename to FSCS727_Forensics/Labs/9_Recover_Graphics/content_example_ibiza.jpg