Difference between revisions of "ASR"

From ForensicsWiki
Redirect page
Jump to: navigation, search
(History)
(Redirect ASR -> ASR Data. Removed content, as ASR is not a tool, but a company. Content should be in the SMART and other articles.)
 
(One intermediate revision by one other user not shown)
Line 1: Line 1:
=ASR=
+
#REDIRECT [[ASR Data]]
 
+
Builds a tool for Linux. Coming soon is an "ultra-portable attack box".
+
 
+
[http://www.asrdata.com/ website]
+
 
+
 
+
=Features=
+
 
+
==File Systems Understood==
+
 
+
==File Search Facilities==
+
 
+
==Historical Reconstruction==
+
 
+
Can it build timelines and search by creation date?
+
 
+
==Searching Abilities==
+
 
+
Offers power regex searches.
+
 
+
 
+
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
 
+
==Hash Databases==
+
 
+
* Uses SHA1, MD5 and CRC.
+
 
+
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
+
What sort of hash functions does it use?
+
 
+
==Evidence Collection Features==
+
 
+
* "Just about everything you do is logged in SMART. You can selectively export these log events into a simple HTML report."
+
 
+
=History=
+
 
+
+
==License Notes==
+
 
+
Commercial, although it runs on Linux.
+
 
+
= External Links =
+
 
+
EnCase Homepage - http://www.guidancesoftware.com/lawenforcement/ef_index.asp
+
 
+
==External Reviews==
+

Latest revision as of 13:40, 30 March 2006