ILooKIX - What do y...
 
Notifications
Clear all

ILooKIX - What do you think?

69 Posts
17 Users
0 Likes
5,911 Views
(@warlock88)
Posts: 19
Active Member
Topic starter
 

Hey guys,

I've worked with the old version of Ilook for quite some time, and i personally think that it was a great software. But as you may know, the project ended and there is no support for the old version.

I saw that a new version, IlookIX is now on the market, and I was wondering if any of you had tried it already, and if so, what do you think? Comparing it to the old timers like Encase and FTK.

Thanks

 
Posted : 30/01/2012 3:13 pm
(@ryanp)
Posts: 19
Active Member
 

Love it. I've "grown up" with ILook - v7, v8 and now KIX. Installation is a piece of cake and away you go with a full copy of MS SQL Server at your disposal. It's fast and does everything I'd ever want it to do. Even better, the folks over at Perlustro are unbelievably responsive. If you can show a decent improvement that will benefit the application, count on it being included in the next minor release or two, which by the way are every couple of weeks instead of once a year or so.

 
Posted : 08/02/2012 12:37 am
(@warlock88)
Posts: 19
Active Member
Topic starter
 

Hey RyanP
Thanks for your response.
Did you get a chance to compare it to other programs out there, like Encase or FTK?

WarlocK88

 
Posted : 15/02/2012 2:51 pm
mrpumba
(@mrpumba)
Posts: 116
Estimable Member
 

How is anyone getting Ilook, I have tried several times to contact someone from Ilook but have received no response? I am a LEO and would like to get a copy.

 
Posted : 04/03/2012 6:23 pm
(@daveallen)
Posts: 12
Active Member
 

mrpumba,

Jim Baker, who is heading the company now, is a friend of mine and I speak to him often. Shoot me an email at dallen at wavelandpolice dot com and I'll see to it that he gets your information to contact you and I'll answer any questions from an end user point of view. As with the previous poster, I've used ILook from it's free days to the current version and love the software. I've used it to examine Windows, Mac OS, and Linux O/S's. I haven't had a lot of experience with Encase or FTK (other than demos from my peers who use it) so I don't feel qualified to give a comparison.

Dave Allen
Waveland Police Department

 
Posted : 04/03/2012 10:26 pm
(@jlellis)
Posts: 16
Active Member
 

I believe that ILook is no longer available for free to LE. The old IRS iLook website is still up, but no longer valid.

 
Posted : 05/03/2012 12:30 am
(@guidoz)
Posts: 9
Active Member
 

I'm also very interested in information comparing it to EnCase/FTK. Our dept is in the process of looking to upgrade software, and part of my job is to figure out which to get. I've used FTK and EnCase for years (FTK4 is the front runner), but I'm open to other ideas.

Dave, I'd love some information as well (http//www.perlustro.com/ is where I've been) if you're open to sharing. Thanks!

P.S. A PM or here is fine, though I can share other contact info via PM.

 
Posted : 05/03/2012 11:37 am
dacton
(@dacton)
Posts: 22
Eminent Member
 

Hi everyone,

I'm another long time ILook user (since ILook 7) and I really like it. My Agency has purchased EnCase and FTK for us but we just haven't got them loaded on a workstation currently and I have not used either FTK or EnCase to any great extent lately. I tried FTK 1 and processed one case in FTK 2 but have not even installed 3. EnCase I have only used when on training at the Canadian Police College. I find it very non-intuitive but have never had the official EnCase training. So I can't really compare them specifically to ILook.

But I was showing ILook to some fellow examiners when I was traveling a couple of weeks ago. I could not take a real case with me so I downloaded the EnCase training image called TDurden. I loaded the case into ILookIX (I think it was version 2.1.85) and checked off for full processing. From memory that would mean that the file system was mapped, the files were hashed with MD5 and SHA1 and then a negative hash analysis was done to eliminate the known system files, the files were virus scanned, the media was hashed for verification against the image file hash, the archives were deconstructed, the email was deconstructed, the metadata was pulled from Office documents, the EXIF data was pulled from the image files, link files were deconstructed, the recycle bin files were deconstructed, the thumbs files were deconstructed, the image was probed for lost files and folders, the files were indexed (not sure whether it was all files or the entire media) and all files were categorized by extension type and by signature. This was done on a Dell M6400 laptop with 8 GB RAM, 3.06 GHz quad core and it took ILook 52 minutes to do all this processing. If someone could load the same case into EnCase or FTK on a machine with similar specs, or at least post the specs of the machine they use then we could get some comparisons started.

If anyone is using X-Ways or ProDiscover I'd be interested in how they do as well.

I can't look til Monday to see how many lost files and folders were located.

I hope this info is helpful to some of you. If anyone has been trying to get a hold of Jim Baker, he had surgery a couple of days ago so it might be a few weeks before he gets back to you.

Please feel free to reply here or send me a PM.

Debbie Acton
Canada Border Services Agency

 
Posted : 10/03/2012 11:39 am
(@warlock88)
Posts: 19
Active Member
Topic starter
 

Hey Debbie,

I tried running Encase 7 on an i5 8gb machine and it crashed 6 times!
I was trying to process a 250gb dd, and on top of crashing it also took more than 2 and a half hours! And that's not even the biggest issue, the worst thing was that I couldn't start working on it until it finished the processing.

Same image, same machine different software (ILook), and it only took about an hour.

Have to say that I made my choice..

Warlock

 
Posted : 12/04/2012 12:22 pm
tfink26
(@tfink26)
Posts: 4
New Member
 

Anyone still looking for more info on ILookIX? I recently found a face book page for ILookIX. Just search for "ILookIX".

 
Posted : 24/09/2012 8:53 pm
Page 1 / 7
Share: