Difference between revisions of "AccessData"

From ForensicsWiki
Jump to: navigation, search
m
 
(9 intermediate revisions by 4 users not shown)
Line 1: Line 1:
=AccessData=
+
''AccessData'' offers computer forensics software and training. Their flagship product is [[Forensic Toolkit]], but they offer several others including:
 +
* [[FTK Imager]] - a free imager available as a program that is installed, and a "lite" version that can run without installation.
 +
* [[PRTK|Password Recovery Toolkit]], a workstation-level password cracking application.
 +
* [[DNA|Distributed Network Attack]], their distributed cryptographic brute force cracking network.
 +
* [[FTK Mobile Phone Examiner]], a cellular phone evidence collection tool.
  
Offers toolkits for forensics, password recovery, registry viewing, and distributing the password recovery over a collection of machines.
+
== Trivia ==
  
 +
In 2006, a team from AccessData won the [[DC3 Digital Forensics Challenge]].
  
[http://www.accessdata.com/ website]
+
== External Links ==
  
=Features=
+
[http://www.accessdata.com/ Official Website]
  
==File Systems Understood==
+
[[Category:Vendors]]
 
+
The Forensics Toolkit Imager can read:
+
 
+
* All FAT.
+
* NTFS
+
* Ext2 and Ext3
+
* HFS
+
* HPFS
+
* CDFS
+
* DVD
+
* Locked systems like SAM/SYSTEM)
+
(See [http://www.accessdata.com/products/imager/ imager notes])
+
+
=== Image File Formats===
+
* Encase
+
* SMART
+
* Snapback
+
* Safeback
+
* DD
+
 
+
==File Search Facilities==
+
 
+
 
+
* "View over 270 different file formats"
+
* Email search of Outlook, Outlook Express, AOL, Netscape, YAhoo, Earthlink, Eudora, Hotbal and others.
+
* Registry Viewer
+
 
+
==Historical Reconstruction==
+
 
+
Can it build timelines and search by creation date?
+
 
+
==Searching Abilities==
+
 
+
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
 
+
==Hash Databases==
+
 
+
* Uses MD5 and SHA1.
+
* Uses hash databases from NIST and Hashkeeper.
+
* Create custom hashsets. ("Coming soon.")
+
 
+
 
+
==Evidence Collection Features==
+
 
+
Can it sign files? Does it keep an audit log?
+
 
+
=History=
+
 
+
Originally written in (YEAR), it has now developed into a Forensic Edition and an Enterprise Edition.
+
 
+
==License Notes==
+
 
+
Is it commercial or open source? Are there other licensing options?
+
 
+
= External Links =
+
 
+
[http://www.accessdata.com/ website]
+
 
+
==External Reviews==
+

Latest revision as of 00:19, 25 November 2009

AccessData offers computer forensics software and training. Their flagship product is Forensic Toolkit, but they offer several others including:

Trivia

In 2006, a team from AccessData won the DC3 Digital Forensics Challenge.

External Links

Official Website