computer forensics lab: Use MFT Parser for this lab. This lab will use the image from the Dolos Financial case.. Using the forensic tool(s) of your choice, extract the $MFT from the image. There may...

computer forensics lab:

Use MFT Parser for this lab.

This lab will use the image from the Dolos Financial case.. Using the forensic tool(s) of your choice, extract the $MFT from the image. There may be more than one $MFT. You can use any you find.

Parse the $MFT with MFT Parser. From the results, choose any three files you like. Identify the $File_Name and $Standard_Info attributes of the files. In a paragraph or two, tell me what the information in the attributes tells you.

Use screenshots and a narrative to document your findings.