Difference between pages "AccessData" and "Mailing lists"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
(More lists, more links.)
 
Line 1: Line 1:
=AccessData=
+
There are multiple '''mailing lists''' which are related to [[computer forensics]].
  
Offers toolkits for forensics, password recovery, registry viewing, and distributing the password recovery over a collection of machines.
+
== Mailinglists ==
  
 
+
* [http://www.securityfocus.com/archive/104 SecurityFocus: Forensics] ('''forensics@securityfocus.com''')
[http://www.accessdata.com/ website]
+
** [http://www.securityfocus.com/archive/128 SecurityFocus: Forensics in Spanish] ('''forensics-es@securityfocus.com''')  
 
+
* [http://www.securityfocus.com/archive/138 SecurityFocus: Binary Analysis]
=Features=
+
* [http://www.securityfocus.com/archive/116 SecurityFocus: LogAnalysis]
 
+
* [http://www.securityfocus.com/archive/136 SecurityFocus: Real Cases]
==File Systems Understood==
+
* [http://www.porcupine.org/forensics/tct.html#mailing_list TCT users] ('''tct-users@porcupine.org''') - Are there any public archives of this list?
 
+
* [http://groups.yahoo.com/group/cftt/ Computer forensics tool testing] ('''cftt@yahoogroups.com''') - Are there any public archives of this list?
The Forensics Toolkit Imager can read:
+
 
+
* All FAT.
+
* NTFS
+
* Ext2 and Ext3
+
* HFS
+
* HPFS
+
* CDFS
+
* DVD
+
* Locked systems like SAM/SYSTEM)
+
(See [http://www.accessdata.com/products/imager/ imager notes])
+
+
=== Image File Formats===
+
* Encase
+
* SMART
+
* Snapback
+
* Safeback
+
* DD
+
 
+
==File Search Facilities==
+
 
+
 
+
* "View over 270 different file formats"
+
* Email search of Outlook, Outlook Express, AOL, Netscape, YAhoo, Earthlink, Eudora, Hotbal and others.
+
* Registry Viewer
+
 
+
==Historical Reconstruction==
+
 
+
Can it build timelines and search by creation date?
+
 
+
==Searching Abilities==
+
 
+
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
 
+
==Hash Databases==
+
 
+
* Uses MD5 and SHA1.
+
* Uses hash databases from NIST and Hashkeeper.
+
* Create custom hashsets. ("Coming soon.")
+
 
+
 
+
==Evidence Collection Features==
+
 
+
Can it sign files? Does it keep an audit log?
+
 
+
=History=
+
 
+
Originally written in (YEAR), it has now developed into a Forensic Edition and an Enterprise Edition.
+
 
+
==License Notes==
+
 
+
Is it commercial or open source? Are there other licensing options?
+
 
+
= External Links =
+
 
+
[http://www.accessdata.com/ website]
+
 
+
==External Reviews==
+

Revision as of 18:01, 21 March 2006

There are multiple mailing lists which are related to computer forensics.

Mailinglists