I am becoming fan of the "portable app" notion.
I love to be able to take my Forensics laptop, have all the apps on it, but just as well I take an external USB drive with most of the applications installed as portable apps.
… just as well I take an external USB drive with most of the applications installed as portable apps.
Which programs or apps have you selected for this functionality, and what size of Flash/Thumb drive do you have them residing on ?
I personally have a functional mix of programs on my 8 Gb 3M Clip drive. The mix is between forensic use and Incident Response type needs. )
I picked the Clip drive due to having lost several drives due to the covered (cap) end of the drive somehow cracking the body of the drive and thus the internal board ends-up falling out. I know that they are still useable, but not for practical field work.
Here are some of the types of programs I have installed
The Sysinterals Suite of programs
7-Zip
Access Data's FTK Imager 2.5.3.14
Portable App's Command Prompt
Mozilla's FireFox <current version with Add-on's like NoScript)
Mozilla's ThunderBird < current version with Lighting - Calendaring and To-Dos )
RegShot
Portable WinMd5Sum
Portable WireShark 1.2
Xinorbis 4.1 < Hard drive contents/listing - analysis and graphing program - current version is 6.X )
Back To the Thread …… idea
i have a 64GB USB3 drive
i have
osTriage
X-Ways Forensics
TrueCrypt
EditPad Pro
VLCPortable
ThunderbirdPortable
FTK Imager
i have a 64GB USB3 drive
i have
osTriage
X-Ways Forensics
TrueCrypt
EditPad Pro
VLCPortable
ThunderbirdPortable
FTK Imager
How do you like OSTriage over other solutions?
I want a budget like that! )
You can start by showing your boss what you could use (as in having skills for) and what the benefits are from of getting that tool/software. You're not going to get expensive equipment and software handed to you just because "it is cool stuff".