The plans to a secret weapon were found on a USB Key in a parking lot outside a military installation that uses only default installations of Windows 7. During initial examination of the files on the USB key, the investigator had some questions that they were hoping that you might be able to answer. The investigator provided a screen capture of the files and the modified, accessed, and created times of the files on the USB Key. Using only the screen capture as evidence, please answer the following questions.
HINT: Default installations of Windows 7 will have the last access time disabled.
This challenge was written by Rob Lee of the SANS Digital Forensics Team.
HINT: Default installations of Windows 7 will have the last access time disabled.
This challenge was written by Rob Lee of the SANS Digital Forensics Team.