Source: Juni_2026_Exams/Advance_Forensics/stories/001-project-status.md

📖 Story 001 - Project Status

🎯 Goal

Prepare a practical lab-based Forensics exam knowledge base for Juni 2026 that focuses on hands-on tool usage, forensic artifacts, and real investigation workflows.

✅ Current Status

Completed (June 15, 2026)

[x] Folder structure created
[x] Main README written (study guides + links)
[x] HANDOUT written (for other students)
[x] Focus points documented (Tier 1/2/3)
[x] Tool workflow guides created:
[x] FTK Imager step-by-step
[x] Registry Explorer guide
[x] DCode timestamp conversion
[x] MFT Explorer deleted file recovery
[x] LNK file analysis
[x] Registry artifacts cheatsheet
[x] Exam answer template created
[x] Checklists created:
[x] Practical exam checklist
[x] Registry artifacts cheatsheet
[x] Tools cheatsheet
[x] Evidence answer format guide
[x] Stories folder ready for agile tracking

In Progress

Hands-on execution of the 47 documented lecture exercises
Collection of screenshots and observed results from the university VM
Timed reproduction of the verified 2025 exam

To Do

[x] Scan lecture PDFs and extract exercises
[x] Create lecture exercise workbook
[x] Create verified previous-exam solution walkthrough
[ ] Add screenshots to guides
[ ] Create mock exam questions
[ ] Add timeline examples
[ ] Create practice scenarios

📊 Project Breakdown

Phase	Status	Tasks
Setup	✅ Done	Folder structure, template files, guides
Content	⏳ Waiting	Lecture PDFs, exercise extraction
Practice	⏳ Ready	Template + previous exam analysis
Review	🔴 Not Started	Final checklist + memory test

📋 Acceptance Criteria

A new student opening this repo should be able to:

✅ Understand what topics are Tier 1 priority
✅ Know which tool to use for each forensic question
✅ Find the registry path they need quickly
✅ See real examples of previous exam answers
✅ Practice using the exam template

📈 Metrics

Metric	Target	Current
Tool guides	5	5 ✅
Registry paths documented	20+	15+ ✅
Checklists	4	4 ✅
Lecture exercise files	5+	0 ⏳
Mock questions	10+	0 ⏳

002-exam-preparation-plan.md → Overall strategy
003-open-tasks.md → Specific next steps

📝 Notes

All materials focus on practical execution, not theory
Tools emphasized: Registry Explorer, FTK Imager, DCode, MFT Explorer
Answer format includes: Question → Tool → Artifact → Path → Answer
Timeline: Ready for intensive prep 1-2 days before exam

Last Updated: June 15, 2026