Ads
related to: digital forensics tools for windows
Search results
Results from the WOW.Com Content Network
A digital forensics platform and GUI to The Sleuth Kit: COFEE: Windows: proprietary: n/a: A suite of tools for Windows developed by Microsoft Digital Forensics Framework: Unix-like/Windows: GPL: 1.3: Framework and user interfaces dedicated to digital forensics Elcomsoft Premium Forensic Bundle: Windows, macOS: proprietary: 1435
The Sleuth Kit can be used to examine most Microsoft Windows, most Apple Macintosh OSX, many Linux and some other UNIX computers. The Sleuth Kit can be used via the included command line tools, or as a library embedded within a separate digital forensic tool such as Autopsy or log2timeline/plaso.
Computer Online Forensic Evidence Extractor (COFEE) is a tool kit, developed by Microsoft, to help computer forensic investigators extract evidence from a Windows computer. Installed on a USB flash drive or other external disk drive, it acts as an automated forensic tool during a live analysis. Microsoft provides COFEE devices and online ...
Autopsy includes a graphical user interface to display its results, wizards and historical tools to repeat configuration steps, and plug-in support. Both open-source and closed-source Modules exist for the core browser, including functionality related to scanning files, browsing results, and summarizing findings.
EnCase is the shared technology within a suite of digital investigations products by Guidance Software (acquired by OpenText in 2017 [2]). The software comes in several products designed for forensic, cyber security, security analytics, and e-discovery use. EnCase is traditionally used in forensics to recover evidence from seized hard drives.
Digital Forensics Framework (DFF) is a discontinued computer forensics open-source software package. It is used by professionals and non-experts to collect, preserve and reveal digital evidence without compromising systems and data.
This tool saves an image of a hard disk in one file or in segments that may be later on reconstructed. It calculates MD5 and SHA1 hash values and can verify the integrity of the data imaged is consistent with the created forensic image. The forensic image can be saved in several formats, including DD/raw, E01, and AD1. [4]
WinHex is a commercial disk editor and universal hexadecimal editor used for data recovery and digital forensics. [1] WinHex includes academic and forensic practitioners, [2] the Oak Ridge National Laboratory, Hewlett-Packard, National Semiconductor, law enforcement agencies, and other companies with data recovery and protection needs.
Ads
related to: digital forensics tools for windows