osTriage is great and one of the best triage tools I've used in a very long time. Crowbar is good but really it's just an applescript which mounts the DMG and runs through a prebuilt or custom dictionary one word at a time. I believe one word per second as well. So it's not extremely fast unless the password is very easy. Though it's free so I cant complain very much.
i am intrigued. tell me more about this osTriage! =)
osTriage is great and one of the best triage tools I've used in a very long time. Crowbar is good but really it's just an applescript which mounts the DMG and runs through a prebuilt or custom dictionary one word at a time. I believe one word per second as well. So it's not extremely fast unless the password is very easy. Though it's free so I cant complain very much.
Who makes osatriage? Also what software do you use Dave?
Who makes osatriage? Also what laptop do you use Dave?
I did! =)
it is free to law enforcement, governments, military, etc or anyone who supports those kinds of operations.
my laptop is a sager 19". 9170 i think. its freaking amazing. i got it from xoticPC
17" Apple MacBook Pro. Added 16gb RAM and 512gb SSD. Sssh, don't tell Apple. -). It screams. If it werent for all of the macs I run examine I would have gone for something like Eric's choice. Though, 19"? That's a beast!
I used to have a 17" Dell XPS when they were awesome. It was nice but like 8lbs plus a 10lbs power supply. Ugh!
my laptop is a sager 19".
A 19" laptop! For me, my portable kit has to be, well, portable. Has to be small and light yet with the ability to do the job efficiently. I got a Lenovo T430s laptop last year, 14" (1600 x 900) display, has a tiny power pack, weighs under 2kg yet has space for 3 internal hard drives. For my needs, there's nothing better available.
17" Apple MacBook Pro. Added 16gb RAM and 512gb SSD. Sssh, don't tell Apple. -). It screams. If it werent for all of the macs I run examine I would have gone for something like Eric's choice. Though, 19"? That's a beast!
I used to have a 17" Dell XPS when they were awesome. It was nice but like 8lbs plus a 10lbs power supply. Ugh!
Thank you Dave. I currently run a Mac book pro. 13 inch little guy.
my laptop is a sager 19".
A 19" laptop! For me, my portable kit has to be, well, portable. Has to be small and light yet with the ability to do the job efficiently. I got a Lenovo T430s laptop last year, 14" (1600 x 900) display, has a tiny power pack, weighs under 2kg yet has space for 3 internal hard drives. For my needs, there's nothing better available.
Johnathan,
What do you have for software on your laptop?
Tom
What do you have for software on your laptop?
Tom
X-Ways Forensics, WinHex, EnCase 6 and 7, Internet Evidence Finder, LogMeIn, WiTopia, 7Zip, Office 2013, FTK Imager, Kernel for Exchange, Proof Finder, WinDirStat, Oxygen Forensic, AccessData Mobile Phone Examiner Plus, Eraser, CCleaner, F-Response Tactical, VirtualBox, TrueCrypt, Tableau Imager and lots of other little utilities. Looking at the list reminds me of what an expensive business this is…
I am curious what software everyone has on the laptop n their go kit? Also, what software do you have installed?
MS LogParser
TSK Tools
UltraEdit
Perl
All my own stuff (RegRipper, RegScanner, Forensic Scanner, tools to parse various data sources and structures…)