[Q]Forensic tool

From: Jun (junat_private)
Date: Mon May 14 2001 - 23:13:00 PDT

  • Next message: H Carvey: "Registry Key LastWrite times"

    I have a plan to buy some forensic tools.
    I read that "each tool has certain features that make it 
    more appropriate for certain cases. i.e., TCT for a 
    solaris environment, EnCase for a Win98 
    environment, NTI NT Suite for a NT environment, 
    glimpse for indexing a directory, DD for making a true 
    bit-stream image, etc." in a article.
    So, Except free s/w, I have a plan to but EnCase. It's 
    also recommended by SC magzine.
    
    Would you recommend another forensic tool?
    
    Purchasing purposes are research, and real using for 
    forensic.
    
    If you think that some product is good, please 
    recommend it for me.
    



    This archive was generated by hypermail 2b30 : Mon May 28 2001 - 20:10:44 PDT