Hi, first time poster so please forgive me if I sound like a non-sports fan asking questions about the Super Bowl. I'll spare the long version of the story but we make a portable hd duplicator. We just finished firmware that will do write blocking so we're going to release a "forensic package." We've had a couple of early testers of the device suggest that we bundle a program that will provide the MD5, and/or SHA1 and SHA2 files so the product would be more complete.
So my questions are, 1) do you agree? or do most forensic examiners already have a "go to" hash software program? 2) if you think we should include this, are there solid, inexpensive products that you would recommend that we take a look at? Either freeware, trialware or something that we could bundle?
Any advice, suggestions, comments either via the forum or direct would be greatly appreciated.
Thanks!
Tony
–
Tony Overbay, CEO
Diskology, Inc.
tony at diskology dot com
1) do you agree?
Yes…some capability such as this is needed for completeness in the product.
2) if you think we should include this, are there solid, inexpensive products that you would recommend that we take a look at?
H. Carvey
"Windows Forensics and Incident Recovery"
I would lean towards SHA as the method of chice for hashing. As stated by the acronym it's the Standard Hashing Algorythem.
Quick off of the top of your head, who created MD5?
Answer….. Ron……?
I've just seen your post.
Professor Ronald L. Rivest of MIT.
Also the S in SHA stands for Secure not Standard.