You can access the Volatility room here. Task 10: Practical Investigations Question 1 – What is the build version of the host machine in Case 001? Answer: 2600.xpsp.080413-2111 Question 2 – At what time was the memory file acquired in Case 001? Answer: 2012-07-22 02:45:08 […]