ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Digital forensics lab"

From ForensicsWiki
Jump to: navigation, search
(Created page with "==For an instructional lab== ===Goals of the Lab=== * Teach basic forensic practices * Acquaint with procedures ===Hardware=== * High performance workstation with: ** At least...")
 
(No difference)

Latest revision as of 03:39, 9 December 2013

For an instructional lab

Goals of the Lab

  • Teach basic forensic practices
  • Acquaint with procedures

Hardware

  • High performance workstation with:
    • At least 16GiB of RAM.
    • At least 3TB of local storage, ideally >8TB.
  • SATA docks to allow SATA drives to be plugged and unplugged. Ideally connect the docks with USB3 or eSATA. Be sure you have docks that can handle hard drives > 2TB.

Open Source Software

  • SleuthKit

Commercial Software

In general we do not recommend commercial software for instructional purposes, but if you need it, here's stuff to buy:

For a research lab

Goals of the Lab

  • Insight on how to conduct research