The objective of this assignment is for you to demonstrate an understanding of timelines and MAC times. There are TWO parts to the assignment. The first is where you run a couple of Linux forensics utilities against an image to create a timeline based on files I’ve provided. You will then answer questions associated with the timeline you created.
Part two of the assignment requires you to answer questions about a timeline I provide you.