From b21858860496fbe0229278ded54a840ad15fddb2 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Tue, 1 Sep 2026 12:14:24 -0500
Subject: all of the things

---
 CHFI1/wk3_lab1.md | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 CHFI1/wk3_lab1.md

(limited to 'CHFI1/wk3_lab1.md')

diff --git a/CHFI1/wk3_lab1.md b/CHFI1/wk3_lab1.md
new file mode 100644
index 0000000..c735277
--- /dev/null
+++ b/CHFI1/wk3_lab1.md
@@ -0,0 +1,6 @@
+1. xmount --in ewf Windows_Evidence_001.E01 /home/jason/Documents
+2. 8
+3. dd if=/dev/fmem of=/home/james/Documents/test_ram.dd bs=1MB
+4. NTFS
+5. 346849
+6. disk_analysis.py
-- 
cgit v1.3.1