diff --git a/FSCS727_Forensics/Labs/Steganography/GIFutil.dll b/FSCS727_Forensics/Labs/Steganography/GIFutil.dll new file mode 100644 index 0000000..1e09652 Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/GIFutil.dll differ diff --git a/FSCS727_Forensics/Labs/Steganography/S-Tools.exe b/FSCS727_Forensics/Labs/Steganography/S-Tools.exe new file mode 100644 index 0000000..facee98 Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/S-Tools.exe differ diff --git a/FSCS727_Forensics/Labs/Steganography/S-Tools.hlp b/FSCS727_Forensics/Labs/Steganography/S-Tools.hlp new file mode 100644 index 0000000..920fbe7 Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/S-Tools.hlp differ diff --git a/FSCS727_Forensics/Labs/Steganography/_Steganography_S-Tool_Lab_Manual.pptx b/FSCS727_Forensics/Labs/Steganography/_Steganography_S-Tool_Lab_Manual.pptx new file mode 100644 index 0000000..2bcef45 Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/_Steganography_S-Tool_Lab_Manual.pptx differ diff --git a/FSCS727_Forensics/Labs/Steganography/_company_secret.TXT b/FSCS727_Forensics/Labs/Steganography/_company_secret.TXT new file mode 100644 index 0000000..6124212 --- /dev/null +++ b/FSCS727_Forensics/Labs/Steganography/_company_secret.TXT @@ -0,0 +1 @@ +This is a iPhone design doc. Top secret! \ No newline at end of file diff --git a/FSCS727_Forensics/Labs/Steganography/_tower_original_image_for_lab.bmp b/FSCS727_Forensics/Labs/Steganography/_tower_original_image_for_lab.bmp new file mode 100644 index 0000000..8cfadf6 Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/_tower_original_image_for_lab.bmp differ diff --git a/FSCS727_Forensics/Labs/Steganography/cryptlib.dll b/FSCS727_Forensics/Labs/Steganography/cryptlib.dll new file mode 100644 index 0000000..d4ff4e6 Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/cryptlib.dll differ diff --git a/FSCS727_Forensics/Labs/Steganography/zlib.dll b/FSCS727_Forensics/Labs/Steganography/zlib.dll new file mode 100644 index 0000000..78feecd Binary files /dev/null and b/FSCS727_Forensics/Labs/Steganography/zlib.dll differ diff --git a/FSCS727_Forensics/PPT/Introduction to Hyper-V on Windows 10 _ Microsoft Docs.pdf b/FSCS727_Forensics/PPT/Introduction to Hyper-V on Windows 10 _ Microsoft Docs.pdf deleted file mode 100644 index 53cfda6..0000000 Binary files a/FSCS727_Forensics/PPT/Introduction to Hyper-V on Windows 10 _ Microsoft Docs.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/1_Analysis of a USB storage device-FAT.pptx b/FSCS727_Forensics/PPT/chap05/1_Analysis of a USB storage device-FAT.pptx deleted file mode 100644 index 0273c80..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/1_Analysis of a USB storage device-FAT.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/2_New Technology File System_NTFS_.pptx b/FSCS727_Forensics/PPT/chap05/2_New Technology File System_NTFS_.pptx deleted file mode 100644 index 5bbc6cd..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/2_New Technology File System_NTFS_.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/3_Window_Registry.pptx b/FSCS727_Forensics/PPT/chap05/3_Window_Registry.pptx deleted file mode 100644 index 530c177..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/3_Window_Registry.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/4_Optional_Window Registry_Intro.pptx b/FSCS727_Forensics/PPT/chap05/4_Optional_Window Registry_Intro.pptx deleted file mode 100644 index dad21b9..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/4_Optional_Window Registry_Intro.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/5_Optional_Windows_Registry_ Extra.pptx b/FSCS727_Forensics/PPT/chap05/5_Optional_Windows_Registry_ Extra.pptx deleted file mode 100644 index 6a7373d..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/5_Optional_Windows_Registry_ Extra.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/FAT_cheatsheet.pdf b/FSCS727_Forensics/PPT/chap05/FAT_cheatsheet.pdf deleted file mode 100644 index bab3113..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/FAT_cheatsheet.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/FileSystem.ppt b/FSCS727_Forensics/PPT/chap05/FileSystem.ppt deleted file mode 100644 index 336f3d3..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/FileSystem.ppt and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/FileSystem_Intro.pdf b/FSCS727_Forensics/PPT/chap05/FileSystem_Intro.pdf deleted file mode 100644 index ee3f36e..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/FileSystem_Intro.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/Share Files & Folders Between Your Host Machine.pptx b/FSCS727_Forensics/PPT/chap05/Share Files & Folders Between Your Host Machine.pptx deleted file mode 100644 index 6b5c6b9..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/Share Files & Folders Between Your Host Machine.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/Understanding_ect_shadow_file.pptx b/FSCS727_Forensics/PPT/chap05/Understanding_ect_shadow_file.pptx deleted file mode 100644 index 07746d2..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/Understanding_ect_shadow_file.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/WindowRegistry.pptx b/FSCS727_Forensics/PPT/chap05/WindowRegistry.pptx deleted file mode 100644 index 81b71b2..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/WindowRegistry.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/a583014.pdf b/FSCS727_Forensics/PPT/chap05/a583014.pdf deleted file mode 100644 index 835dba1..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/a583014.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/book_info_file_system_forensic_analysis.pdf b/FSCS727_Forensics/PPT/chap05/book_info_file_system_forensic_analysis.pdf deleted file mode 100644 index 378e417..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/book_info_file_system_forensic_analysis.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/filesystem.pdf b/FSCS727_Forensics/PPT/chap05/filesystem.pdf deleted file mode 100644 index 22186ca..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/filesystem.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/wireless-networks-windows-registry-computer-been-33659.pdf b/FSCS727_Forensics/PPT/chap05/wireless-networks-windows-registry-computer-been-33659.pdf deleted file mode 100644 index 9cf4cfd..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/wireless-networks-windows-registry-computer-been-33659.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/~$1_Analysis of a USB storage device-FAT.pptx b/FSCS727_Forensics/PPT/chap05/~$1_Analysis of a USB storage device-FAT.pptx deleted file mode 100644 index 1366957..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/~$1_Analysis of a USB storage device-FAT.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/chap05/~$2_New Technology File System_NTFS_.pptx b/FSCS727_Forensics/PPT/chap05/~$2_New Technology File System_NTFS_.pptx deleted file mode 100644 index 1366957..0000000 Binary files a/FSCS727_Forensics/PPT/chap05/~$2_New Technology File System_NTFS_.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/email_investigations.pdf b/FSCS727_Forensics/PPT/email_investigations.pdf deleted file mode 100644 index b3fca86..0000000 Binary files a/FSCS727_Forensics/PPT/email_investigations.pdf and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch01.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch01.pptx deleted file mode 100644 index 1042c55..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch01.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch02.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch02.pptx deleted file mode 100644 index 7dbdb3c..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch02.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch03.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch03.pptx deleted file mode 100644 index d048793..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch03.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch04.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch04.pptx deleted file mode 100644 index fbb6a79..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch04.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch05.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch05.pptx deleted file mode 100644 index c2d26fd..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch05.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch06.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch06.pptx deleted file mode 100644 index c4bfd83..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch06.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch07.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch07.pptx deleted file mode 100644 index 2c5b92a..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch07.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch08.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch08.pptx deleted file mode 100644 index 2360ffc..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch08.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch09.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch09.pptx deleted file mode 100644 index 4816563..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch09.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch10.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch10.pptx deleted file mode 100644 index c35c6ba..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch10.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch11.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch11.pptx deleted file mode 100644 index 8be5bea..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch11.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch12.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch12.pptx deleted file mode 100644 index b1ccc53..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch12.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch13.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch13.pptx deleted file mode 100644 index 5be103b..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch13.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch14.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch14.pptx deleted file mode 100644 index 8d580c0..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch14.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch15.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch15.pptx deleted file mode 100644 index 4035b9c..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch15.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch16.pptx b/FSCS727_Forensics/PPT/gcfi6e_ppt_ch16.pptx deleted file mode 100644 index 2845ec1..0000000 Binary files a/FSCS727_Forensics/PPT/gcfi6e_ppt_ch16.pptx and /dev/null differ diff --git a/FSCS727_Forensics/PPT/~$gcfi6e_ppt_ch08.pptx b/FSCS727_Forensics/PPT/~$gcfi6e_ppt_ch08.pptx deleted file mode 100644 index 1366957..0000000 Binary files a/FSCS727_Forensics/PPT/~$gcfi6e_ppt_ch08.pptx and /dev/null differ