Hello everyone,
I have a question regarding the closing of the “dognapping” case in the Autopsy one-day online training course. So, after a bit of digging around, I’ve discovered that there is in fact an encrypted veracrypt disk image concealed in the file system, which I have managed to open. However, its contents do not appear to be that illuminating.
So, other than exif geotagging and some meeting details revealed in a few emails, is there anything more we should have uncovered?
Sorry in advance if this is off-topic or irrelevant, I understand that the course is about Autopsy as a tool and not about the case itself, but I really got curious near the end 