java in forensic computing

There are several products in digital forensics that use Java in some fashion.

AccessData PRTK comes to mind.

Here, let me go ahead and Google that for you…

https://docs.oracle.com/javase/tutorial/essential/io/bytestreams.html

http//docs.guava-libraries.googlecode.com/git/javadoc/com/google/common/hash/HashFunction.html

Link
jwmi query windows wmi from java

There is an important lesson in the link just above. Sure, it works, but look at HOW he had to do it to make it work (he basically wrote a VBScript wrapper).

I wouldn't use Java for anything except browser based applications that have to be cross platform and not dig deep into the system. In .NET, i can query WMI in just a few lines of code.

I believe you can create Autopsy modules in Java, too.

I wouldn't use Java for anything except browser based applications that have to be cross platform and not dig deep into the system. In .NET, i can query WMI in just a few lines of code.

I'm a little unclear as to why someone would consider WMI to be "used to implement digital forensic tool functions ( disk imaging, verification (e.g. hash functions), data carving …etc.) ".

WMI is great for live system access, but I'm not sure why someone would consider it for low-level disk/binary-level access.

This might be a reason not to use java

http//www.bbc.co.uk/news/technology-35427685