Digital Forensics Practice "Deleted Scene" and Prove Labs

Career Paths
1

I’m encountering two problems in completing the Digital Forensics path.
First, in the pracitce lab Deleted Scene, the lab will not start. After clicking “Start Lab”, it changes to “Loading” then right back to “Start Lab” so I am unable to proceed.
Second, for the Prove lab, the instructions say there are two folders on the desktop called Tools and RegistryFiles. However, only tools is present. Opening Autopsy and recent cases, the recent case does not have a user named Cybrary User which is one of the questions.

prove lab
prove lab1920×597 86.9 KB

prove lab2
prove lab22163×826 71 KB

Additionally, checking the BAM and AppCompatCache for the registry files in the recent case in Autopsy, there are not .bat files seen.

2

I can confirm the Deleted Scene lab does not load. I will alert the Cybrary team.

I also think that the Prove assessment is the wrong desktop, I am also escalating to the team.

3

The Deleted Scene lab loads now.

The Prove assessment is still being worked on.

1 Like
4

Thank you, can confirm the Deleted Scene labs works and can be completed.

5

These are both fixed - sorry about that!

2 Likes
6

Thank you! I can confirm the assessment lab has the correct files now. I am running into an issue in answering question 5 in the lab, however. I have found the answer, but the hint says to provide the answer in *************[**]*****.*** form. Putting the answer in that form does not work. Answer in spoilers:

Summary

ahyalandunyai[k@]gmail.com

I have tried a number of variation including without the brackets, brackets around the @, around the . only, and am absolutely sure that is the answer.

7

The instructor seems to be expecting the answer to be submitted with the [@] sign written out as [at]. You have the correct answer otherwise.

Let me check with him around his expectations for the formatting, but I expect we’ll clarify the question and/or answer shortly.

1 Like
8

Okay, so the instructor confirmed they had de-fanged their answer as [at], but we’ve updated the assessment to accept both formats. They also confirmed a typo with the missing letter k, which has been fixed as well.

9

Thank you, can confirm the answer now works!

1 Like