Loading...
FortiDetective: Investigation Report
Quiz by Hannah Kemsley
Tag the questions with any skills you have. Your dashboard will track each student's mastery of each skill.
​On the left hand side of your screen, are all of the different pieces of evidence that you can look at that we have taken from Oliver's computer. First, you should look at the emails that he has received...the email entitled 'Business Proposal' looks interesting - what is the email address that approaches Oliver?
(Hint: click on the image below to make it full screen)
​In the email from 'Ace' , Oliver is given an encoded password that unlocks the first chat, which you can find in the folder 'APP_BACK-UPS' (see the image below) .What is the decrypted password that Oliver uses to unlock Chat-1?
(Hint: Use your guidebook to assist you!)
On the left hand side of your screen, are all of the different pieces of evidence that you can look at that we have taken from Oliver's computer. First, you should look at the emails that he has received...the email entitled 'Business Proposal' looks interesting - what is the email address that approaches Oliver?
(Hint: click on the image below to make it full screen)
In the email from 'Ace' , Oliver is given an encoded password that unlocks the first chat, which you can find in the folder 'APP_BACK-UPS' (see the image below) .What is the decrypted password that Oliver uses to unlock Chat-1?
(Hint: Use your guidebook to assist you!)
Who is Oliver working with?Â
Hint: To find the chats, use the screenshot below
What time does Arnold send the chat message: Will do, boss. Everything's set for the getaway
Hint: give your answer in the format: 20:24 PM
Find Oliver's crypto receipt. What are the last 4 digits of the card number Oliver used to purchase the crypto?
Find Oliver's carhire receipt. What was the receipt number for the car hire purchase?
Look at the Data Artifacts. What is Oliver's most recent web search?
What browser applications does Oliver use?
Look at chat-5. What is the name of the file that contains the instructions for the heist?
Hint: Give your answer in the format: answer.pdf
Read chat-6 and use the clues to look for the text file containing the password. What is the password Oliver uses to decode STEGasaurus.jpg?
Read the heist instructions. What is the PIN code for the Jewelry Store's lock?Â
How many steps are in Ace's plan of action?
Read the email that Arnold sends to Oliver, and search for the pictures he sent him. How many carats does the diamond in one of the pictures that Arnold sends to Oliver have?
Hint: Give you answer in the format: 20.24
Search for the map screenshots stored on Oliver's laptop. How many minutes does the map say it will take Oliver and Arnold to get to the store if they were to walk?
Read Chat5 to find the password for Oliver's next chat with Ace. How many ROT rotations are needed for Oliver to unlock Chat-7?
Read the messages in chat-8. What is the name of the site that Arnold uses to sell the jewelry?Â
What time is Oliver's final message sent?
Hint: Give your answer in the format 20:24 PM
Look at the videos on Oliver's laptop - what is the name of the file that Oliver uses to hide his info he has collected on Ace?
Hint: Give your answer in the format: answer.pdf
Congratulations, your investigation is almost complete, now you need to piece together the order of events:
Hint: To undo a selection, click on the line that's been drawn
Using what you found on Oliver's computer, can you tell what is Ace's real identity?
Hint: click 'enlarge image' underneath each option to make the profiles full screen!
