Axiom Exam - ConnorEast/Tech-Journal GitHub Wiki

Evidence Found

Evidence Operating System Data Type Size
Dell Laptop Microsoft NTFS Microsoft NTFS 238.47GB
Phone Apple Iphone



Evidence 1: ~~~ Dell Laptop Findings

Evidence Source Details
--- Case Dashboard.
Operating System --- Windows 11 Core (2009)
Version Number  ---  6.3
Installed/Updated Date/Time --- 6/5/2023 11:14:02.000PM
Product Key --- N7729-FYKMH-F6CJW-2HBYT-XQBWW
Owner --- Brenda Baldwin
Display Computer Name --- DESKTOP-2JH2UMN
Computer Name --- DESKTOP-2JH2UMN
Build Number --- 22000
Product ID --- 00342-20770-57940-AAOEM
Last Shutdown Date/Time  --- 6/26/2023 6:44:06.000 PM
User Account  --- bbaldwin
Evidence Source Details
--- Artifacts Total.
All Evidence --- 458,642
Refined Results --- 5,642
Web Related --- 105,365
Communication --- 14
Media --- 100,868
Email & Calendar --- 547
Documents --- 3,467
Additional Sources --- 1
Cloud Storage --- 58
Application Usage --- 146
Operating System --- 240,673
Encryption & Credentials --- 126
Connected Devices --- 10
Location & Travel --- 461
Custom --- 1,264

Notes:

  • Decryption uses Fernet
--- Disk\Users\Brenda Baldwin\Dropbox\Computer Code\02_Decrypt Files\decryptFiles.txt
  • downloadFiles.txt was set up by steve.burgess [p@55w0rd] [192.168.22.118:38475]
  • --- Disk\Users\Brenda Baldwin\Dropbox\Computer Code\01_Download Files\downloadFiles.txt
  • encryptAndHideFiles.txt creates a hidden path where the folder is hidden using a fernet key
  • --- Disk\Users\Brenda Baldwin\Dropbox\Computer Code\03_Encrypt and Hide Files\encryptAndHideFiles.txt
  • AxCrypt-2.1.1636.0-setup.exe is found in the user downloads
  • --- Disk\Users\bbaldwin\Downloads\AxCrypt-2.1.1636.0-setup.exe






  • Evidence 2: ~~~ Drive Findings




    Evidence 3: ~~~ Phone Findings

  • ⚠️ **GitHub.com Fallback** ⚠️