Another wonderful reply from Ian
Ian Brownlie has sent you a message.
Date 4/21/2013
Subject RE where can we get a demo or trial of ilook? i wait, i cant, not even of their imaging tool. why does it matter if some arbitrary test…
I emailed Perlustro and they said they would bet 10,000.00 to st jude, that they would whip the a*s off your tool. (this is of course a standing offer for you and your buddies)
I told them I’d put up another 1k on top.
When we going to get started ?
Who you want to elect to hold the money ?
Oh btw, VSS is OFF the table as a method to recover data, as is registry hive deleted keys, but if you really want to lose faster, I’ll add them in.
If you wish to discuss this further, pick another forum instead of defaming or making defamatory comments on other forums without checking first?
For your information according to Perlustro, FBI was one of the largest licence holders of ILook and ILookPI when the product was free……
wonder why they want to limit the testing by excluding VSS and registry hive deleted keys detection, or are they the world leaderz in that too?
also, every govt agency there is was using it since the US govt was paying for its development, yes?
I don't know who Ian is. He appears to be from Australia. I can't answer for him at all.
Between 1999 or 2000 or so until 2007, the US government supported ILook by providing money and employees and I believe they also took over the administration of the licensing scheme for the US and maybe other parts of North America. There was huge involvement by at least one Brit, in fact he was the original inventor of ILook, Eliot Spencer. I received my original licence from him and continued to receive them from him even after the US government was involved. But I think Canadians who started with ILook later may have obtained their license through the US government.
IRS were heavy users of ILook. US Customs, not so much. There were many, many small town and state agencies that also used ILook. Anyone could have a license. The only requirement was that you were full time law enforcement and that you maintained and requested it on an individual basis. That's how I got my first license; I read about it and wrote away and asked for it and then used it when it was granted.
Once the US government was involved I believe some Agencies were allowed to get site licenses and keep their own records of the users. There were no dongles so user identification was built into the installation of the software on the PC and tied to the user. There are still no dongles and it is still tied to the user.
It was an interesting time in forensics when all of these tools were first being developed.
Does that answer your question about whether every govt agency was using it?
This ship has sailed a bit off course from the original "Re EnCase 7 vs FTK4" posting… roll
This ship has sailed a bit off course from the original "Re EnCase 7 vs FTK4" posting… roll
And noone cares to reply "properly" to the "proper" thread here
http//www.forensicfocus.com/Forums/viewtopic/t=8679/
jaclaz
I will move over there since this really is hijacking this thread. Anyone interested, follow along.
Use their specifications guide to configure your system properly, put your DB on a dedicated SSD.
And your ADTemp folder if you can. If in doubt, move the whole user directory in your Environment Variables for uberspeed.
Try to find an AccessData Oracle DB installer disc because from my experience, PostgreSQL tends to crash FTK when working with moderately large cases (2 million + items).
Something's wrong with your Postgres implementation. Anyway, SQL is the future. Postgres and SQL will both outperform Oracle.