Info 710 Project - Drexel University

The team chose to relocate its output and results files to another machine not involved in the forensic analysis in order to prevent any volatile data from being overwritten. When viewing the results of running the capture file through tcpdstat, a few scenarios came to light that are possibly backed by evidence of the capture file’s statistics. ................
................