Chapter 7 Current Computer Forensics Tools.pptVIP

Guide to Computer Forensics and Investigations * Guide to Computer Forensics and Investigations * UNIX/Linux Forensic Tools continued Knoppix-STD Knoppix Security Tools Distribution STD A collection of tools for configuring security measures, including computer and network forensics Knoppix-STD is forensically sound Doesn’t allow you to alter or damage the system you’re analyzing Knoppix-STD is a Linux bootable CD Guide to Computer Forensics and Investigations * Guide to Computer Forensics and Investigations * Guide to Computer Forensics and Investigations * Simplify computer forensics investigations Help training beginning investigators Most of them come into suites of tools Advantages Ease of use Multitasking No need for learning older OSs Other GUI Forensic Tools Guide to Computer Forensics and Investigations * Other GUI Forensic Tools continued Disadvantages Excessive resource requirements Produce inconsistent results Create tool dependencies Guide to Computer Forensics and Investigations * Computer Forensics Hardware Tools Technology changes rapidly Hardware eventually fails Schedule equipment replacements When planning your budget consider: Failures Consultant and vendor fees Anticipate equipment replacement Guide to Computer Forensics and Investigations * Forensic Workstations Carefully consider what you need Categories Stationary Portable Lightweight Balance what you need and what your system can handle Guide to Computer Forensics and Investigations * Forensic Workstations continued Police agency labs Need many options Use several PC configurations Private corporation labs Handle only system types used in the organization Keep a hardware library in addition to your software library Guide to Computer Forensics and Investigations * Forensic Workstations continued Not as difficult as it sounds Advantages Customized to your needs Save money Disadvantages Hard to find support for problems Can become expensive if careless Also need to identify what you i