Difference between pages "Helix3" and "File:2-BB9780-ScrewRemoval.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
Line 1: Line 1:
This live cd is built on top of Knoppix.
[http://www.e-fense.com/helix/ main site]
==File Systems Understood==
==File Search Facilities==
==Historical Reconstruction==
Can it build timelines and search by creation date?
==Searching Abilities==
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
==Hash Databases==
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
What sort of hash functions does it use?
==Evidence Collection Features==
Can it sign files? Does it keep an audit log?
Originally written in (YEAR), it has now developed into a Forensic Edition and an Enterprise Edition.
==License Notes==
Is it commercial or open source? Are there other licensing options?
= External Links =
EnCase Homepage - http://www.guidancesoftware.com/lawenforcement/ef_index.asp
==External Reviews==

Latest revision as of 06:31, 8 August 2013