Hi everyone
I'm researching and comparing different types of forensic software and I was just wondering whether you guys could help me. Does the software xry, xways, Encase and Helix have bookmark reports like AccessData's FTK?
If so what file types are they? (FTK is HTML for example)
I have only got experience in FTK so I'm unsure about the others and I can't find any information on the web.
Thanks for you help
I cant speak for anything other than Encase but Encase does have bookmark report functionality.
IMHO its a very antiquated way of displaying material of value.
Probably one of the areas that Guidance need to improve in the next major release of Encase.
what format is this report? like ftk is html.
EnCase offers to export in either RTF or HTML, however, we usually don't use the EnCase report itself as a final product.
EnCase offers to export in either RTF or HTML
I tend to use the RTF version because it can form the basis for a decent Word document or an appendix to my report.
I don't use any tools vanilla reporting function as a complete report because either there's something missing or it's too technical for a court report on it's own. I like to provide a summary that the average person can understand and which is backed up by technical appendices that the opposing experts to get their teeth into. No forensic tools that I know of have this flexibility.
Paul
Hello, X-ways also has a HTML report function. 'Bookmarks' in X-ways are actually called 'Report Tables' and you give a particular item a 'Report Table Association' to enter it in that section of the report.
However as binarybod says the reports that come out of most forensic software are not generally complete enough and often need a fair bit of editing and customization afterwards.