MACB Timestamps and $I30in NTFS File Systems

Weekly study;

Week: 6

Day	Planned to do	Did
Monday	Working from 9-5 Finish FTK lab session Add everything from blog if not done yet 1 hour reading on network investigation Blog post on accessing registry FTK If time: Re-visit SYSDA lab session Do some Ubuntu work for an hour 1 hour reading on security protocols	Message Gosport company Blog post on doing a case in FTK FTK imager post done Registry hive done Next to do- reading on security protocol x 45- comp sec needs a lot more work Then re-visited my computer security lecture notes Revisiting SYSDA lesson Blog work- happy without layout now, just need to check images and sort wording Still to do- Ubuntu work- 1 hour All of which can be fit in
Tuesday	Reading on each topic for the week x3 Separate to this, do an hour reading on security protocols Watch 1 hour of videos Blog work, needs to be clean and ready to go- this means revisiting and cleaning up so it is presentbale, I want it to be uploadable by the end of the week! If happy with this then just upload the two things Finish all not done Monday Job search profile More reading? Or SYSDA coursework work	Studies from Unsure of how long it will take me to do blog work In the morning- reading on booting laptops, touched upon hard disk geometry Then did reading on Linux based file systems- covered superblock, still work to do on group descriptor table Computer security- read up on forward secrecy Read all previous lectures Watched video on perfect forward secrecy Then did a job profile search- included things such as Websites used- no more than an hour Titles in which relevant jobs came up Salaries Skills required Skills desirable Found a way to relate this back to blog Any other relevant information Sent a message regarding standing out to an investigator network intrusion reading Uploaded all of my lecture and lab notes for the week
Wednesday	Probably have an hour in which I can type up lecture notes for the week Maybe more? (focus on jobs and blog)	Reply from company, need to call at some point today- tried calling no answer, will try calling again later on WA letter- revisit, see if I can identify weaknesses Checked Forensic Focus Completed sensitivity check on blog- made amendments Made two blog posts- still work to do
Thursday	Read and make notes on a forensic article Finish the SYSDA lab session 1 re-do a lab session involving linux- make sure its comp sec -1 Reading on security protocols- 45 minutes Working on FTK- 1 30	Did article on alternate data streams- consider posting at some point Did an hours work on the MFT in Linux, documented this Worked on ftk for an hour and half Brief reading of past compsec Make a document regarding areas I need to know for my compsec coursework, shouldn’t be too long Did further reading on ExtX from file system forensic analysis book Further reading 45 minutes on incresponse- hard disk DID NOT do Briefly set out plan for coursework tomorrow or do blog related/tidying up some labs
Friday	This day will be dedicated to doing my SYSDA coursework- I want to finish the day with an action plan on how to do it, a known machine to use for both suspect and analysis machine Note: may have to email about this Also want to watch some videos relating to forensics	Watched videos on netcat acquisition, both of which were in-depth and showed me a live view of how it was used Should be receiving email with more documents Permitted to use lab computer for analysis
Saturday	Check forensic focus news Write up what I have learnt this week Blog posts sorted for the week Make a note to slowly start uploading extra reading Security reading/ past compsec lab sessions	As such completed the tasks as well as: Networking on linkedin- messaged a few forensic people Uploaded lecture notes for COMFIC and SYSDA- after making changes Uploaded lecture notes- leaving log for tomorrow Did some blog work- started noting the format I want to use
Sunday	Blog focus, needs to be uploaded by the end of this week, if this means re-doing images then I will have to do this This purely a blog day Need to plan for next week Try make an updated MFT post if possible Make sure that Monday is a lab day focused on comp sec Ubuntu and open ssl commands	Little bit of blog work