After installing Belkasoft Evidence Center, you need to learn about Belkasoft X.

Open the attached document, view the videos, and answer the questions.

The videos will help you learn about various Belkasoft X feature

Belkasoft X – Week 1 Videos
5 total pages

Start Belkasoft Evidence Center

Watch the first five videos listed at the bottom of the opening screen.

First Steps With Belkasoft X: 2.5 minutes

1. How is the main menu accessed?

2. What must be done before a user can make a selection from the main menu?

3. Where are tutorial videos found?

Creating a Case: 3 minutes

Found at the bottom center of the Belkasoft window

1. Why do you need to pay attention to the Folder and Time Zone fields when creating a case?

a.

b.

2. What should you do if you have forensic cases in different time zones?

3. Why does the Belka X dashboard only initially display sample data sets?

4. How can you open an existing case?

Adding an Existing Data Source:

7 minutes

1. Where is the “Add data source” option found?

2. List the 5 existing data source types?

a.

b.

c.

d.

e.

3. Choosing a Physical Drive allows you to select a specific:

4. What is the purpose of the Analysis type column?

5. What is the different Carving options?

6. You decide to create a Custom Profile. Which Artifact type would we be most interested in for this course?

7. What is the purpose of the Filter option?

8. What options for classifying pictures are available on the Media page?

9. What is the purpose of the screen shown below?

Working with the Dashboard: 6 minutes

1. When is the Dashboard opened?

2. What option on the Dashboard would you select to include more data sources?

3. Which Action should you use to decrypt something encrypted by the suspect?

4. What is the benefit of selecting the “Show nested data sources” checkbox?

5. List at least 3 examples of artifacts that can be extracted from a data source.

6. How do you drill down to the data for a particular artifact?

Working with the Artifacts Window: 5 minutes

1. Where do the artifacts come from?

2. Which tab in Artifacts is used to see where artifacts are stored?

3. How would you display the contents of a Chat?

4. What is the difference between the Structure tab and the Overview tab?

Structure:

Overview:

5. Which tab (Structure or Overview) provides more details about each artifacts origin?

6. What is the difference between the Bubble view and the Table view?

Bubble:

Table:

7. How can you display the Hex Viewer?

8. How can you display the properties of an item?

Belkasoft X Video Questions 2