±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36231
New Yesterday: 0 Visitors: 146

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Suggestions for new hardware or software

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

ebmetric
Member
 

Suggestions for new hardware or software

Post Posted: May 25, 18 10:01

Hello,

At this point I've decided to upgrade my software and/or hardware equipment for forensics.
Mainly at my work I focus on acquisition of all type of data from computers and servers.

Right now from hardware I have: TABLEAU TX1, T8u and T35u.
And from software: Belka Evidence Center 9, EnCase v8, Autopsy, R-Studio, OSForensics.

Maybe someone could suggest what could I additionally buy for my tasks?

P.S. I have lately encountered problems in cases where are I have servers with RAID configuration, maybe someone can suggest software/hardware for RAID server imaging and rebuilding.

Thanks.  
 
  

mcman
Senior Member
 

Re: Suggestions for new hardware or software

Post Posted: May 25, 18 12:52

F-Response for logical RAID acquisitions and live servers you can't shut down is a nice one to have IMO. Allows you to do it over the network and avoid dealing with RAID issues or servers that the client won't let you shut down. A little slower over the wire but could be helpful based on what you have.

Jamie  
 
  

Igor_Michailov
Senior Member
 

Re: Suggestions for new hardware or software

Post Posted: May 25, 18 14:35

Creating a digital forensic laboratory: Tips and Tricks
www.digitalforensics.c...nd-tricks/
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 
 
  

tracedf
Senior Member
 

Re: Suggestions for new hardware or software

Post Posted: May 26, 18 02:07

What kinds of cases are you handling? Do you do mobile at all? What are your current limitations?

Are you unhappy with any of your current tools and looking for a replacement or are you just looking to add something?

I use AXIOM as my primary application for most cases and supplement that with a variety of free and inexpensive tools. Tableau for write blocking. I use Autopsy occasionally and Forensic Explorer for a second perspective when I'm analyzing Windows.  
 
  

ebmetric
Member
 

Re: Suggestions for new hardware or software

Post Posted: May 28, 18 06:08

Thank You all for your time.

Jamie, definitely will check F-Response for RAID imaging.

- tracedf
What kinds of cases are you handling? Do you do mobile at all? What are your current limitations?

Are you unhappy with any of your current tools and looking for a replacement or are you just looking to add something?

I use AXIOM as my primary application for most cases and supplement that with a variety of free and inexpensive tools. Tableau for write blocking. I use Autopsy occasionally and Forensic Explorer for a second perspective when I'm analyzing Windows.


As I said previous "Mainly at my work I focus on acquisition of all type of data from computers and servers." I don't work with mobile phones.

About limitations, I have encountered few problems when task requires to acquire data from servers running with RAID configuration.

And am I disappointed/unhappy with tools/software. No everything is great I just look to add something new.  
 

Page 1 of 1