Investigate Hashing and Forensics Techniques - Report Writing - Science Assignment Help

Assignment Task

Assignment Overview
For this assignment, you will investigate hashing and forensics techniques. You will complete both Part A and Part B in a written report. The report should have your name, student number,

Part A
1. Convert your student number to MD5 hash.
2. Save hash in a notepad file.
3. Record the hash of the file.
4. Does either of the following change the hash? Why/Why not. (i) Change Attributes (Read-Only/Hidden)
(ii) Change Permissions (Full Control/Modify/Read/Write) (iii) Change extensions (e.g. *.txt to *.exe) (iv) Chang email to yourself and download it.
(v) Append the file with spaces
(vi) Remove the spaces (in (v))
(vii) Delete the file and recover it with forensics software (e.g. Autopsy)
(viii) Delete the file and recover it with backup software (e.g. photorec)
5. In a Linux System echo “hash” | nc –q0 127.0.0.1 514 use the hash in (2). nc 127.0.0.1 <notepad.txt use the file in (2) Hint: You may need to omit the “-q0”. You may find the following command helpful: tcpdump -i eth0 -vv -XX -n port 514 tcpdump -i <interface> -s 65535 -w <file> md5sum notepad

echo -n Welcome | md5sum

You can save the tcpdump pcap file and open in wireshark in the netcat immesive lab.

Complete the following:

(v) In Wireshark what was the sender and destination IP? (x) What is the hash of the packet? (xi) What is the hash of the content (xii) Did the destination reply?

6. Does either of the following change the hash? Why/Why not.
Send the file 10 times
Does the hash of the packet change?
Does the hash of the content change?

7. Import the notepad file as a Hash Import to a Forensic Software. Search for all occurrences of the hash. Does it search for the file or content of a file? Explain.
8. Open the content of the packet use a Reserve MD5 hash. What was the end value?
9. View and explain the history of your network traffic with wireshark View and explain the history of your system using a forensic tool such as Autopsy (or Event Viewer - explain what you have done on a system

This Science Assignment has been solved by our Science experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.
Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.