I'd happily have a look at it if I could get a free trial.
However I am not going to pay over 2k for something that up until a few days ago I'd never even heard of despite the fact that their website reliably informs me they are the biggest, best and most widely used in the world 😉 not to mention the first and pioneers of computer forensics responsible for the entire industry.
Hi Adam,
I am pretty sure you can get a trial version for a month or so.
ILook is built with a Sequel Server backbone and I think you would have to use Sequel Express for the trial, rather than the full SQL Server. The main limitations of Express versus the full version are 1 physical processor, 1 GB memory (your system can have more, it just won't use it) and 10 GB storage, per database, so it obviously won't be as robust as the full version but it would certainly allow you to see what you are missing. D
Try using the contact page on the website.
Debbie
Today I've noticed that ILooKIX is now certified by NIST (National Institute of Standards and Technology) for both, the IXImager and ILooKIX. IMHO a pretty good argument at the court.
More info
BTW We are using ILook during the last 10 years (hey, time to celebrate the anniversary! D ) and don't want to change over to another software.
NIST doesn't certify tools. It does limited testing and releases the results.
I note that you link to a page belonging to the tool's publisher, not to the NIST page with the supposed certification.
There is just something about this tool that makes it seem like they are trying really really hard to sell it, kind of like a used car and it just puts me off.
They make ridiculous claims on their website, my favorite is "The only 100% qualified forensic imaging software system on earth" Talk to any marketing analysts and one of the keywords to look out for when you are being conned is %100. Now look on the website and try and count how many times %100 is mentioned.
It might be the best tool in the world but they try so hard and over sell themselves it makes me cringe.
But what it comes down to for me is there is no incentive to go and learn a new tool now unless this is going to do something that no one else does. From what I'm seeing on the site it does pretty much exactly the same as Encase or XWF does only they claim to do it better and faster…..but they all claim that so that's not enough.
They do Virus and Trojan detection, so what I doubt they do it better than the AV companies so I'll stick with them for AV scans.
There is just something about this tool that makes it seem like they are trying really really hard to sell it, kind of like a used car and it just puts me off.
….but … but it exceeds NIST Test Criteria ! 😯 wink
http//www.forensicfocus.com/Forums/viewtopic/p=6562161/#6562161
jaclaz
Sorry, I thought this is a forensic forum. Are we talking about advertising strategies?
Have you ever tested or seen ILooKIX and it's features. Working with > 10 millions of objects, sorting, filtering or hashing out files in seconds? Have you ever checked the capabilities of "extreme file recovery"? I guess, you didn't!
It is always the same. People using a tool over years are happy or desperately unhappy. If you are happy with Encase or XWF Be happy and stay happy with it. I am more than happy with Ilook, but I always stay curious and try to look around every day. I like to eat fish and like my favorite beer, but I always try other food and other beers with fun. And sometimes I find things tasting much better than fish. 😉
And IMHO I like the work of NIST. Trying to find reproducable rules and standards even for forensic tools is a good way to what I want to call "quality", comparable "quality". If you think it's not necessary, be happy, but don't talk bad about others and show more tolerance.
BTW Even if my profile shows me as "newbie", I am doing my job for 15 years meanwhile.
Have a nice weekend and keep smiling!
Sorry, I thought this is a forensic forum.
Yes, rest assured you are correct.
Are we talking about advertising strategies?
Yes, at least I was.
I mean it's not like on a Forensic Forum it is not allowed to talk about advertising/marketing strategies ) (or about the weather - BTW it's raining here) .
The referenced IXImager page is IMHO a mish-mash of marketing hype, contains a number of nonsensical and/or unbacked up claims.
This does not mean that the product is not a very good one D , as a matter of fact I believe it is, only that (given also the intended target, made - in theory - of expert investigators, either LE or private) the approach strikes for the "optimism" of the content and when read with a critical eye reveals quite a number of flaws in the wording/construction.
A few further examples.
When you make a detailed list, you either fill it with ALL items or any missing item will look like missing, according to that page the thingy has
- 100% full kernel mode NTFS write support
- Full ext2 and ext3 read and write support
- Full FAT32 read and write support
- Full HFS+RW support
What about NTFS Read?
And FAT 12/16?
What does this mean in plain English? 😯
Output media size is fully user determinant
The suspence is killing me … wink
Only tool in existence that will create restores to Virtual Disk form in native formats without
…. ?
jaclaz
Sorry, I thought this is a forensic forum. Are we talking about advertising strategies?
I don't know if you've seen, but, let's just say, Ilook have an interesting method of 'getting the message' to potential customers. It seems to be based around astroturfing http//
Have a nice weekend and keep smiling!
I'm going to.
BTW Even if my profile shows me as "newbie", I am doing my job for 15 years meanwhile.
So post your real name and company and we'll know whether your endorsement is worth a damn.
Otherwise your post is marketing hype, and you still haven't responded to the fact that NIST does NOT certify forensic software. This is even worse than when EnCase was claimed to be "court approved" when the judgement simply mentioned that the examiner successfully used EnCase to gather the evidence, thereby approving of the examiner's work, but not the tool.
In the gaming world, they have a saying "SS or it didn't happen". For those with no prior exposure to this comment it means that if you don't provide a screenshot (SS) of your claimed achievement, then you're lying.
Provide a link to a page hosted by NIST where they officially certify iLook and I'll apologise and admit my mistake. In the mean time though, SS or it didn't happen.