Difference between pages "SMART" and "Gfzip"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(SMART for Linux)
 
 
Line 1: Line 1:
SMART is a software utility that has been designed and optimized to support data forensic practitioners and Information Security personnel in pursuit of their respective duties and goals. The SMART software and methodology have been developed with the intention of integrating technical, legal and end-user requirements into a complete package that enables the user to perform their job most effectively and efficiently.
+
Gfzip is a file format designed by [[Rob J Meijer]] to hold forensic copies of disk images. The format provides for images that are both uncompressed and compressed, and allows both data and meta-data to be signed using x509 certificates.
  
SMART is more than a stand-alone data forensic program. The features of SMART allow it to be used in many scenarios, including:
+
Details on gfzip can be found at http://www.nongnu.org/gfzip/
  
    *  "Knock-and-talk" inquiries and investigations
+
[[Category:Forensics File Formats]]
    *  on-site or remote preview of a target system
+
    *  post mortem analysis of a dead system
+
    *  testing and verification of other forensic programs
+
    *  conversion of proprietary "evidence file" formats
+
    *  baselining of a system
+
 
+
 
+
Who Uses SMART?
+
SMART is currently utilized by:
+
 
+
    *  Federal, State and local Law Enforcement
+
    *  U.S. Military and Intelligence Organizations
+
    *  Accounting Firms
+
    *  Data forensic examiners
+
    *  Data recovery specialists
+
    *  Disaster recovery professionals
+
    *  Information security professionals
+
    *  Health care privacy professionals
+
    *  Internal auditors
+
    *  System Administrators
+

Latest revision as of 10:33, 23 September 2012

Gfzip is a file format designed by Rob J Meijer to hold forensic copies of disk images. The format provides for images that are both uncompressed and compressed, and allows both data and meta-data to be signed using x509 certificates.

Details on gfzip can be found at http://www.nongnu.org/gfzip/