﻿Filesystem Investigation

The files under casefiles were recovered from a damaged training system.
Do not modify them. Follow the course lesson and record evidence for every conclusion.