Search Results for "windows forensics"

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

The Forensics Data Identifier (FDI) is a tool which allows for large data files to be easily filtered for common forensically relevant data types.The tool was intended to speed up the ediscovery and analysis processes of the forensics investigation

... uma estrutura, seja ela de um arquivo do sistema operacional (por ex, um .lnk), de um arquivo de um aplicativo (por ex, um .ppt) ou mesmo de uma estrutura do próprio sistema (por ex, o $I30). Byte Investigator The Byte Investigator project from Octane Labs was born in order to be a parsing toolkit for several Windows structures (files and file system structures). These Perl script tools are useful tools for Computer Forensics professionals and Information Security researchers.

SQLJuicer - SQL Server Transaction Log Forensics This is a Perl tool that lists database CRUD transactions parsing SQL Server Transaction Log entries. It depends on SQL Server and SQLCMD utility. Due to this dependencies, SQLJuicer.pl script cannot run in Linux. It is prepared to be localized to any language. The output language, by this date, can be English (default) and Brazilian Portuguese

Found at www.itadmins.net in the Projects area. The complete Linux Administrators CD. For normal system and network administration, security, forensics tools and utilities.