Friday, October 17, 2008

Data Forensics

image

It looks like Helix, a data forensics tool baked in a Live CD has been updated.  This is a cool tool that I've used in the past to analyze some images at work that we were given.  Rather then spending thousands of dollar on EnCase and other tools, I've used this tool to scour and search hard drive images.  As I'm not a forensic investigator, we generally pay for a licensed investigator to obtain the image and then we use our own tools to find the data.  There's also a forensic's wiki full of open source goodness.

No comments: