Difference between revisions of "ASR"

From ForensicsWiki
Redirect page
Jump to: navigation, search
 
(Redirect ASR -> ASR Data. Removed content, as ASR is not a tool, but a company. Content should be in the SMART and other articles.)
 
(3 intermediate revisions by one other user not shown)
Line 1: Line 1:
 
+
#REDIRECT [[ASR Data]]
 
+
=Features=
+
 
+
==File Systems Understood==
+
 
+
==File Search Facilities==
+
 
+
==Historical Reconstruction==
+
 
+
Can it build timelines and search by creation date?
+
 
+
==Searching Abilities==
+
 
+
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
 
+
==Hash Databases==
+
 
+
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
+
What sort of hash functions does it use?
+
 
+
==Evidence Collection Features==
+
 
+
Can it sign files? Does it keep an audit log?
+
 
+
=History=
+
 
+
Originally written in (YEAR), it has now developed into a Forensic Edition and an Enterprise Edition.
+
 
+
==License Notes==
+
 
+
Is it commercial or open source? Are there other licensing options?
+
 
+
= External Links =
+
 
+
EnCase Homepage - http://www.guidancesoftware.com/lawenforcement/ef_index.asp
+
 
+
==External Reviews==
+

Latest revision as of 14:40, 30 March 2006