CS 6963 - WK 8

CS 6963 - WK 8 - you could only have one! Have a good week!...

Info iconThis preview shows pages 1–20. Sign up to view the full content.

View Full Document Right Arrow Icon
Page 1 of 20 Unit 8 Forensic Tools, Selection and Use After a couple of weeks dealing with the legal establishment, you are probably ready to get back to some technical stuff! This week we will look at some issues regarding forensic tools. Unfortunately, many people are convinced that the use of tools IS digital forensics. I have never quite understood it, but "geeks" (and I'm one myself) like "playing with" software more than using it. It really makes no sense, because if we use the analogy of a carpenter, a good carpenter views hammers and saws as merely a means to an end. You don't see them playing with their saws! There are many tools available. In the lecture you will see a number of websites listed. There are many others.As your discussion this week, each of you will look at at least two different tools and tell me what's good and bad about each of them. Then tell me what tool you'd use, if
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 2
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 4
Background image of page 5

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 6
Background image of page 7

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 8
Background image of page 9

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 10
Background image of page 11

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 12
Background image of page 13

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 14
Background image of page 15

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 16
Background image of page 17

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 18
Background image of page 19

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 20
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: you could only have one! Have a good week! Page 2 of 20 Forensics tools has 2 categories: HARDWARE TOOLS Acquisition Tools: are used to obtain evidence such as; hard drives, Storage Tools: Write Blockers: acquires the images from the media without posing any danger to the evidence. Page 3 of 20 SOFTWARE TOOLS Diagnostic Tools: are used to figure out if hardware and software is working. Forensics Tools: are used to do examination. An examiner should have multiple tools such as a Forensics Work Station, hard drives, Page 4 of 20 Page 5 of 20 Page 6 of 20 EXAMPLE OF WINHEX Page 7 of 20 EAMPLE OF Page 8 of 20 EXAMPLE OF ILOOK Page 9 of 20 Page 10 of 20 Page 11 of 20 Page 12 of 20 Page 13 of 20 Page 14 of 20 Page 15 of 20 Page 16 of 20 Page 17 of 20 Page 18 of 20 Page 19 of 20 Page 20 of 20 http://www.asrdata.com/tools/ www.accessdata.com www.guidencesoftware.com www.techpathways.com...
View Full Document

This note was uploaded on 04/06/2011 for the course CS 6963 taught by Professor Walterbruehs during the Spring '10 term at NYU Poly.

Page1 / 20

CS 6963 - WK 8 - you could only have one! Have a good week!...

This preview shows document pages 1 - 20. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online