±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 31739
New Yesterday: 0 Visitors: 74

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News   Forums   Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Forensic laptop suggestion

Discussion of forensic workstations, write blockers, bridges, adapters, disk duplicators, storage etc. Strictly no advertising of commercial products, please.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2 
  

Re: Forensic laptop suggestion

Post Posted: Wed Jun 04, 2014 12:41 pm

- jhup
What have I done to you to deserve this? Crying or Very sad

It is not what you have done.

It is what you have NOT DONE! Shocked

If you had (at the right time) kicked (the right) a**es and kicked 'em hard enough, this would not have happened.

You are guilty by omission Rolling Eyes Wink .

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Forensic laptop suggestion

Post Posted: Wed Jun 04, 2014 2:17 pm

I use laptops from Malibal.com. eSata, USB 3, Full Keyboard, back lit, You can customize from there.  

ScotchBroth
Member
 
 
  

Re: Forensic laptop suggestion

Post Posted: Thu Jun 05, 2014 5:17 am

- ScotchBroth
I use laptops from Malibal.com. eSata, USB 3, Full Keyboard, back lit, You can customize from there.


Hmmm... Looking at their specs and design, I'd bet a couple of dollars they are based on the Clevo platform Smile As mentioned earlier, I've considered it but finally decided not to give them a try. I have one company that distributes them in my country, so I was a bit afraid about the service issues.

As some of you know, our devices tend to break when they are urgently needed Wink Dell offered 3-year warranty, door-to-door and next day service visit. It may not be "the top of the pops" but I believe it's sufficient.

Nevertheless, if anyone uses Dell for computer forensics, I'd be grateful to share your comments and observations.  

fraudit
Senior Member
 
 
  

Re: Forensic laptop suggestion

Post Posted: Mon Jun 20, 2016 2:33 am

Huge bump, I know, but maybe (just maybe) this little nice project on kickstarter:
www.kickstarter.com/pr...-portable?
will allow an alternative for "portable" forensic machines.


jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Forensic laptop suggestion

Post Posted: Mon Jun 20, 2016 8:26 am

XoticPC sells sager machines which rock. used 3 of them in the past 3 years, zero issues, well built, and you can configure whatever you want in it.

i would not get one of the mainstream vendors for forensic work as you will not be able to pick parts, but thats just me.  

EricZimmerman
Senior Member
 
 
  

Re: Forensic laptop suggestion

Post Posted: Fri Jan 06, 2017 5:14 am

Hi Forensic Focus,

First, I would like to greet everyone a Happy New Year! Smile

Since it is a new year, it means that there will be a new budget for our company to purchase new stuff that we need for our job Smile

I did not create a new thread since this thread appears to be the same with my question.

We are looking for new laptops that we can use for digital forensics.

Here are the stuffs that we will be doing with the laptop:
Log Reading – IDS Logs, malware logs, firewall Logs, event logs, etc…
Sometimes we read logs around 5GB-10GB in file size

We will also be using the following tools:

Harddisk Acquisition Tools:
FTK Imager
Encase

Memory Acquisition Tools
Volatility
Redline

VMware Workstation with the following:
SIFTTools
This is where we will be using volatility and log2timeline
We also use some other forensic tools built in to SIFT

Windows XP/Windows7 for malware black box testing
Basically this is where we run malware files to check the behavior. It has installed tools for packet sniffing, static analysis, system modification (like drop files, deleted files, registry modification), process monitoring, etc.

Some other stuff that we might do:
Installation of cuckoo sandbox

The stuff that we will be doing is not limited to the things that I indicated, we will be doing lots of stuff related with digital forensics so there could be new tools that we need to add in the future.

Here is the basic laptop specification that we have in mind:
Operating System: Windows 7
Processor: I7
RAM: 32GB
HDD: 4TB
USB 3.0

Any inputs will be appreciated!

Thank you!
btforensics  

btforensics
Newbie
 
 
  

Re: Forensic laptop suggestion

Post Posted: Fri Jan 06, 2017 8:49 am

- btforensics

Here is the basic laptop specification that we have in mind:
Operating System: Windows 7
Processor: I7
RAM: 32GB
HDD: 4TB
USB 3.0


IMHO you DO NOT want an internal (crappy) 4TB disk, but rather a blazingly FAST SSD 512 Gb or 1 Tb, and of course USB 3.1.
Then have as many external, USB 3/3.1 multi-TB hard disks and/or FAST USB 3.1 SSD's as your budget allow.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 

Reply to topicReply to topic

Share and Like this forum topic to get more replies




Page 2 of 2
Go to page Previous  1, 2