Describe all steps taken in Autopsy to identify potential evidence, including data files, deleted data files, directories, or drive partitions. Provide screenshots of these steps using the screen capture tool built into the virtual lab environment.

A. Write a report for the team of investigators by doing the following:

1. Describe all steps taken in Autopsy to create the forensic system case file. Provide screenshots of these steps using the screen capture tool built into the virtual lab environment.

Note: To capture screenshots, you must use the screen capture feature inside the virtual lab area. This will add a verified stamp with your name, time or date stamp, and a unique identifier. Instructions for how to do the screen capture are in the “Common Lab Tasks” document on the virtual lab desktop.

2. Describe all steps taken in Autopsy to identify potential evidence, including data files, deleted data files, directories, or drive partitions. Provide screenshots of these steps using the screen capture tool built into the virtual lab environment.

3. Summarize the findings you identified during your investigation and the conclusions you made regarding the suspect and the collected evidence. Using the screen capture tool built into the virtual lab environment, provide screenshots from Autopsy or reports in support of your findings and conclusions.

B. Acknowledge sources, using in-text citations and references, for content that is quoted, paraphrased, or summarized.

C. Demonstrate professional communication in the content and presentation of your submission.