Old tzworks softwar...
 
Notifications
Clear all

Old tzworks software versions

9 Posts
3 Users
0 Likes
1,461 Views
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
Topic starter
 

Hello,

i am starting with digital forensics and trying several tools for this purpose. Some are open source, others trial versions and i already bougt some. The software from tzworks is obviously very good, especially to investige Shell Bags, MFT and other artifacts. This publisher has changed his license agreeement, this tools are not free any more. Does anyone know a source where to get those older, but free versions of their software from?

Robin

 
Posted : 03/09/2014 12:59 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I'm not sure what you mean…the tools are available for download from the Download page.

 
Posted : 03/09/2014 3:12 am
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
Topic starter
 

…..but if you execute them, they are screaming for a license file. So you can only close them after executing. This is the reason i would like to prefer the older, but license-file free tools.

best regards,
Robin

 
Posted : 03/09/2014 12:01 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

Why not just get the free, open tools from others that do the same thing?

 
Posted : 03/09/2014 4:18 pm
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
Topic starter
 

I would like to put their MFT analysis tools to my personal forensic toolbox. I know "analyzeMFT.py" and i have made myself more familiar with Python in general. Do you know other free, forensic sound tools which could analyze a MFT file from an image or extracted by FTK Imager? A GUI would be nice, but is not a requirement.

Robin

 
Posted : 03/09/2014 4:46 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

I would like to put their MFT analysis tools to my personal forensic toolbox. I know "analyzeMFT.py" and i have made myself more familiar with Python in general. Do you know other free, forensic sound tools which could analyze a MFT file from an image or extracted by FTK Imager? A GUI would be nice, but is not a requirement.

Robin

See if this fits the bill
http//www.forensicfocus.com/Forums/viewtopic/t=8010/

jaclaz

 
Posted : 03/09/2014 5:54 pm
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
Topic starter
 

See if this fits the bill
http//www.forensicfocus.com/Forums/viewtopic/t=8010/

jaclaz

Yes it does, thanks a lot. Based on the description of the developer, it is perfect for my needs. I will test it as soon as possible.

It would have been nice if i could compare it with the tzworks tools, but if this isn`t possible it is not a real problem for me. Thanks a lot for for you help, if no one has a download source for the tools initially mentioned, this thread can IMHO be stopped here.

nice greetings from Germany,
Robin

 
Posted : 03/09/2014 6:25 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

…..but if you execute them, they are screaming for a license file.

I wouldn't say "screaming"…I tried one and it stated that the license file is expired.

 
Posted : 04/09/2014 12:04 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

Do you know other free, forensic sound tools which could analyze a MFT file from an image or extracted by FTK Imager? A GUI would be nice, but is not a requirement.

I know of several that are free, but I don't know what you mean by "forensic sound"…assuming you mean "forensically sound", I'm afraid that I still don't know what you mean.

If you see this blog post
http//windowsir.blogspot.com/2014/07/file-system-ops-testing-phase-2.html

In the post, I use my own parser, a previous version of which was included in the downloadable materials for "Windows Forensic Analysis, 4/e" (see the Books page off of the blog for the link…).

 
Posted : 04/09/2014 12:10 am
Share: