Preview Software Re...
 
Notifications
Clear all

Preview Software Recommendations

5 Posts
5 Users
0 Reactions
579 Views
(@otj287)
New Member
Joined: 12 years ago
Posts: 4
Topic starter  

Just wondering what recommendations you all can make for a PD with a little/no budget as far as preview software.

Looking to see what software is being used to assist in triaging .. currently, everything gets seized, imaged, imported, etc. Just trying to look for ways of previewing to see if it's of value before imaging and obviously saving precious space on servers.

Thanks!


   
Quote
(@bithead)
Noble Member
Joined: 20 years ago
Posts: 1206
 

You can request access to ACES LE https://acesle.org/ with your official contact information.


   
ReplyQuote
bshavers
(@bshavers)
Estimable Member
Joined: 20 years ago
Posts: 211
 

Several free boot options, most with lots of open source tools built in
WinFE winfe.wordpress.com
CAINE www.caine-live.net
Raptor www.raptorforensics.com
DEFT http//www.deftlinux.net/
PALADIN http//sumuri.com/software.html

Open source forensic tools
http//www2.opensourceforensics.org/
http//www.digital-forensic.org/

Lists of free forensic tools
http//forensiccontrol.com/resources/free-software/
http//www.gfi.com/blog/top-20-free-digital-forensic-investigation-tools-for-sysadmins/

Other (free) LE tools
osTriage by Eric Zimmerman http//www.forensicfocus.com/Forum
Tux4n6 from NW3C http//tux4n6.nw3c.org/

From SANS
SANS SIFT http//computer-forensics.sans.org/community/downloads

You can literally do almost 99% of everything without spending more than it cost for a spindle of CDs. Everyone has different preferences, but you can build your own system using free and open source tools to fit what you like. I like WinFE with X-Ways Forensics (not free) as it does everything from triage/preview to a full exam in a forensic OS. Most of the Linux forensic boot discs can do the same using open source apps.


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Just wondering what recommendations you all can make for a PD with a little/no budget as far as preview software.

Looking to see what software is being used to assist in triaging .. currently, everything gets seized, imaged, imported, etc. Just trying to look for ways of previewing to see if it's of value before imaging and obviously saving precious space on servers.

Thanks!

OSTriage comes to mind.

However, I think that the more important question here is, "triaging…what?" "Previewing…for what?"

The solution that you're looking for is predicated on the question…if you're triaging for something specific, there may be a viable solution. If you're triaging in general, looking for everything that might possibly be of value, that might take some more work.


   
ReplyQuote
EricZimmerman
(@ericzimmerman)
Estimable Member
Joined: 13 years ago
Posts: 222
 

msg me for details on how to get osTriage. i think you will find it will meet your needs


   
ReplyQuote
Share: