Page History

...

• Pre-SIP Tools and Workflow
  • AccessData FTK (Forensic Toolkit)
    • Description: FTK is designed for law enforcement officials and corporate security and IT professionals who need to access and evaluate the evidentiary value of files, folders, and computers. However, the bookmarks and labels functions which help investigators to organize the evidence they selected are equally applicable to the organization of the whole born digital collection. The pattern and full text search functions which are used to find particular evidence are equally applicable to search for restricted materials.
    • Availability: Now. http://accessdata.com/products/computer-forensics/ftk^{Image Added}
    • License: Proprietary
    • Developers: AccessData Group
    • First release:
    • Current release: 3.3

• • • See YouTube video on the use of AccessData FTK to extract technical metadata and to assign descriptive metadata to collections at http://www.youtube.com/watch?v=hDAhbR8dyp8
      
  • Bulk Extractor
    • Description: "a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures". For sample output, see http://www.forensicswiki.org/wiki/Bulk_extractor
    • Availability:
    • License:
    • Developers:
    • First release: September, 2008?
    • Current release:
  • Gumshoe
    • description: Gumshoe is a Rails-based application for searching metadata from disk images. It relies on Blacklight, Solr, and fiwalk.
    • Availability:
    • License:
    • Developers: Mark Matienzo
    • First release:
    • Current release:

...