Forensic Computing

Schnippzle · 26 Feb 2007 at 14:08

Howdy,
Atm Im doing a course in Computer Forensics, and we have been asked to produce a piece of coursework for it. Thing is, our lecturers are useless (suprise suprise), and have not provided us with any information about forensic tools etc for pc use. Therefore, Im wondering if there are any people on this board who either work for the UK police force, or have knowledge of this area of IT, who can provide me with the names of software, or tools to create a Forensic IT toolkit.

Cheers in advance =D

Carter · 26 Feb 2007 at 14:12

Only one I know of is
http://www.encase.com/
http://www.encase.com/products/ef_index.aspx

Schnippzle · 26 Feb 2007 at 14:34

He he, thats the one that the lecturer has provided us with to use in class. However, for this coursework we have been adviced to use another piece of software.

nade · 26 Feb 2007 at 14:52

Years ago, i used to use programs by OnTrack for recovering files/data from PC's. But that was back in the days of the old Dos&Win3.x combo.

I have never honestly tried any such thing for years. But i'm sure if you look at OnTrack's website they'll have some nice software

Schnippzle · 26 Feb 2007 at 15:05

Much appreciated. Will have a look at that as well.

toString · 26 Feb 2007 at 15:20

Out of interest what kind of course are you doing? A purely forensic computing one or a normal computing bsc?

Schnippzle · 27 Feb 2007 at 11:05

Im doing Computer Studies. Forensic Computing is a module Im doing in my last year.

toString · 27 Feb 2007 at 18:14

Is one of the lecturer's Dave?? Or Nigel??

lemonkettaz · 27 Feb 2007 at 18:17

I'm doing computer forensics (pure) and i have a lecturer called Dave

Schnippzle · 1 Mar 2007 at 13:28

Nah, afraid not. He's called John

JaffaJedi · 1 Mar 2007 at 15:18

have a look at http://www.runtime.org/gdb.htm

on the rhs under forensic tools

Energize · 1 Mar 2007 at 15:25

Auditor security collection is a linux distro full of security tools, from password recovery to data recovery, wep/encryption cracking etc.

So it pretty much is a forensic toolkit.

Bash · 1 Mar 2007 at 17:34

There can be only one...........

http://www.hiren.info/pages/bootcd

v0n · 1 Mar 2007 at 17:58

ImageMASSter Solo-3 and R-Studio for data recovery. Plus X-Ways hex stuff.