Tools

Tools

• Gumshoe
  • description:

• AccessData FTK (Forensic Toolkit)
  • See YouTube video on the use of AccessData FTK to extract technical metadata and to assign descriptive metadata to collections at http://www.youtube.com/watch?v=hDAhbR8dyp8

• Bulk Extractor
  • "a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures". For sample output, see http://www.forensicswiki.org/wiki/Bulk_extractor

• Curator's Workbench
  • description

• Archivematica
  • Archivematica is a comprehensive digital preservation system. Archivematica uses a micro-services design pattern to provide an integrated suite of free and open-source tools that allows users to process digital objects from ingest to access in compliance with the ISO-OAIS functional model.
• ddrescue
  • a raw disk imaging tool that "copies data from one file or block device to another, trying hard to rescue data in case of read errors." See more info from forensics wiki here: http://www.forensicswiki.org/wiki/Ddrescue
• fiwalk
  • description
• sleuthkit
  • description
• autopsy
  • description
• guymager (imaging tool)
•