Just wondering what recommendations you all can make for a PD with a little/no budget as far as preview software.
Looking to see what software is being used to assist in triaging .. currently, everything gets seized, imaged, imported, etc. Just trying to look for ways of previewing to see if it's of value before imaging and obviously saving precious space on servers.
Thanks!
You can request access to ACES LE https://acesle.org/ with your official contact information.
Several free boot options, most with lots of open source tools built in
WinFE winfe.wordpress.com
CAINE
Raptor
DEFT http//
PALADIN http//
Open source forensic tools
http//
http//
Lists of free forensic tools
http//
http//
Other (free) LE tools
osTriage by Eric Zimmerman http//www.forensicfocus.com/Forum
Tux4n6 from NW3C http//tux4n6.nw3c.org/
From SANS
SANS SIFT http//
You can literally do almost 99% of everything without spending more than it cost for a spindle of CDs. Everyone has different preferences, but you can build your own system using free and open source tools to fit what you like. I like WinFE with X-Ways Forensics (not free) as it does everything from triage/preview to a full exam in a forensic OS. Most of the Linux forensic boot discs can do the same using open source apps.
Just wondering what recommendations you all can make for a PD with a little/no budget as far as preview software.
Looking to see what software is being used to assist in triaging .. currently, everything gets seized, imaged, imported, etc. Just trying to look for ways of previewing to see if it's of value before imaging and obviously saving precious space on servers.
Thanks!
OSTriage comes to mind.
However, I think that the more important question here is, "triaging…what?" "Previewing…for what?"
The solution that you're looking for is predicated on the question…if you're triaging for something specific, there may be a viable solution. If you're triaging in general, looking for everything that might possibly be of value, that might take some more work.
msg me for details on how to get osTriage. i think you will find it will meet your needs