Join Us!

Notifications
Clear all

datalifter  

  RSS
tablades
(@tablades)
New Member

I am just getting into forensic investigation, and we are on a tight budget, I found DataLifter forensic software and I would like opinions on this and/or recomendations of other software we may look at. I have been through the encase training, however, at this stage we do not have the resources to purchase the software. We are looking for something good as well as cost effective.

Thanks

Tablades

Quote
Posted : 13/06/2005 7:54 pm
keydet89
(@keydet89)
Community Legend

It might be helpful if you could tell us what your requirements are.

For example, I would suggest ProDiscover from TechPathways, if you're using predominantly Windows and Linux systems.

However, if you need greater capabilities than what PD offers, you might consider something like Autopsy or The Coroner's Toolkit.

Without knowing your reqirements, though (ie, os's you'll be imaging, os you want to do the analysis on, etc.), we're just going to round and round…

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 13/06/2005 8:54 pm
Andy
 Andy
(@andy)
Active Member

X-ways Forensic is another fairly low cost alternative to the mainstream COTS tools.

Andy

ReplyQuote
Posted : 13/06/2005 11:40 pm
matt3x166
(@matt3x166)
Junior Member

Quick question, are you a police officer or do you do exams for a state or local government agency? If so, I have some information to help you get some training and software for free.

Matt

ReplyQuote
Posted : 14/06/2005 8:51 am
tablades
(@tablades)
New Member

We will be using it on Windows based PC's and examining windows based PC's as well. We work for a large corporation and we will be using it to make forensically sound images as well as investigate the content of employees/ex-employees that are involved in certain types of investigations or are using Company equipment for illegal/unauthorized acts. Thanks!

ReplyQuote
Posted : 14/06/2005 12:57 pm
Terrinoni
(@terrinoni)
New Member

Quick question, are you a police officer or do you do exams for a state or local government agency? If so, I have some information to help you get some training and software for free.

Matt

Matt, I'm working on contractual agreements with several local municipal / county police agencies to do criminal computer examinations, and wouldn't mind looking into whatever resources you may have access to. There's no such thing as having too many tools…

ReplyQuote
Posted : 06/03/2008 4:32 am
ctaylor
(@ctaylor)
Junior Member

I can't speak for the use of the product, but we recently purchased the Datalifter suite ourselves. The money was sent in at the end of December, and I hadn't seen hide nor hair of the software by early February. I called support and left a message. I received a phone call back later that evening stating that our order had been mixed up with another police department, and that the software would be forthcoming. I received it a few days later.

I emailed support after it was installed, as when I ran FEPRO from my machine's hard drive, I didn't have a valid license, even though I had copied the one off the dongle. I did get a response back via email within a day, and explained to me that I had to register FEPRO for that computer, and to send an email. I did this last Tuesday.

Shortly thereafter, due to an unfortunate dongle accident in which the dongle they sent was bent (I don't think it's a software dongle, per se, but a USB drive with the software and a license on it), I again emailed support on whether the dongle was actually needed.

That was one week ago, with no response from email. I called support today and got a voice mail…I'm hoping they'll return my call.

In my opinion only, the instructions for installation aren't very clear as far as File Extractor Pro went, and my opinion of their support is mixed. I'm hoping that I didn't waste money on the product, as it does look fairly capable based on what little I've played with it.

As always, your mileage may vary.

Chris

ReplyQuote
Posted : 12/03/2008 12:10 am
MrPeabody
(@mrpeabody)
New Member

So I'm resurrecting a dead thread to see if anyone knows if DataLifter still exists, and if it's worth a newbie seeking out? I've looked all over the web for its site, and can't find one. I've seen 3rd party sites that have it as downloadable shareware or freeware, in various versions. I can't find anything that says it's been repackaged or rebranded or still supported.

Anyone know what the deal is with this? Or if there is another carving tool I should go with instead? The immediate purpose at this point is for classwork and cert exams on a Win XP machine.

Thanks in advance!

ReplyQuote
Posted : 06/06/2014 11:06 pm
jaclaz
(@jaclaz)
Community Legend

The homepage seems like "dead" since 2009
https://web.archive.org/web/20120702024653/http//datalifter.com/

What is the actual *need* or *source* that pointed you towards Datalifter?

As suggested before in this thread X-Ways is an excellent tool (and all in all affordable)
http//www.x-ways.net/winhex/comparison.html
as it offers a number of options and, depending on your needs, a "more limited" version might do (in case supplemented by a few Freeware/Open Source tools).

jaclaz

ReplyQuote
Posted : 06/06/2014 11:25 pm
MrPeabody
(@mrpeabody)
New Member

The CCE cert page still lists DataLifter as recommended software for their exam.

http//isfce.com/software.htm

ReplyQuote
Posted : 06/06/2014 11:46 pm
jaclaz
(@jaclaz)
Community Legend

The CCE cert page still lists DataLifter as recommended software for their exam.

http//isfce.com/software.htm

Most probably it is an oldish page that wasn't updated.

AFAIK, a more complete list is here
http//www.forensicswiki.org/wiki/ToolsData_Recovery#Carving

X-WAYS among the Commercial ones and Foremost/Scalpel among the Free ones are very often used, and after all the referenced page does mention "Or similar utility", I believe that the exam/certifications is more about "methods" and "procedures" than about "specific tools".

jaclaz

ReplyQuote
Posted : 07/06/2014 2:46 pm
MrPeabody
(@mrpeabody)
New Member

That list is more what I'm looking for, really – something that gives more up-to-date options. There are several dead links on that page.

Thanks very much.

ReplyQuote
Posted : 07/06/2014 6:04 pm
fraudit
(@fraudit)
Member

I've looked for a carving software a couple of years ago and considered DataLifter too. The page still existed at the time but no communication with the developer could have been made. Then, the page went blank (though domain existed) and finally even the domain was ceased.

After some time I've managed to find this site which looks like a company that might have taken over DataLifter development (however they might be also an ex-seller of the software as well…). Can't say really whether it's true, as I haven't contacted them, but you may try your luck.

ReplyQuote
Posted : 13/06/2014 12:55 am
jaclaz
(@jaclaz)
Community Legend

After some time I've managed to find this site which looks like a company that might have taken over DataLifter development (however they might be also an ex-seller of the software as well…). Can't say really whether it's true, as I haven't contacted them, but you may try your luck.

Whom, with all due respect ) , posted their last/latest company news about 2011 events roll
http//www.asoto.com/noticias-news/

And however they seemingly are (were?) only distributors of various forensics software and hardware
http//www.asoto.com/la_empresa/

jaclaz

ReplyQuote
Posted : 13/06/2014 3:21 am
Share: