Authors: Jessica Hyde

DFRWS USA 2021

Abstract

Abstract:

As Chromebooks become more prevalent in society, it is important to know how to handle them as evidence. This workshop will include a demonstration and discussion of acquisition methodologies along with a hands-on analysis portion. The hands-on analysis potion will include analysis of sample image files including Chromebook and associate Takeout Data. We will explore data locations available from acquisition of data from a Chromebook and compare it to data from a Google Takeout such that examiners are able to target analysis and understand which artifacts may be missing dependent on the data source available.

Pre-work:

For the Chromebook Workshop it is recommended that folks download the following in preparation for the workshop:

Chromebook image: https://storage.googleapis.com/mvs-2021/Chromebook/chromebook.tgz

Takeout: https://storage.googleapis.com/mvs-2021/Takeout/takeout-20210318T175439Z-001.zip

Mark McKinnon’s CLEAPP: https://github.com/markmckinnon/cLeapp (either the executable or the python)

All other resources will be provided during the session.

Downloads