Difference between revisions of "DIBS"

From ForensicsWiki
Jump to: navigation, search
 
m
 
(5 intermediate revisions by one other user not shown)
Line 1: Line 1:
 +
=DIBS=
 +
 +
This Fort Worth based company makes forensics software and packages it with portable hardware for investigators in the field with desktop workstations for offices.
 +
 +
[http://www.dibsusa.com/ Website]
  
  
Line 4: Line 9:
  
 
==File Systems Understood==
 
==File Systems Understood==
 +
 +
(unknown)
  
 
==File Search Facilities==
 
==File Search Facilities==
 +
 +
* Lists allocated and unallocated files.
 +
* Sorts files by type.
 +
* Searches for keywords.
 +
* Registry Viewer
  
 
==Historical Reconstruction==
 
==Historical Reconstruction==
Line 13: Line 25:
 
==Searching Abilities==
 
==Searching Abilities==
  
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
* Can use basic keyword searching.
 +
* Offers full-text indexing.
  
 
==Hash Databases==
 
==Hash Databases==
  
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
+
* Offers the "Hash Library-KFF".
What sort of hash functions does it use?
+
  
 
==Evidence Collection Features==
 
==Evidence Collection Features==
Line 26: Line 38:
 
=History=
 
=History=
  
Originally written in (YEAR), it has now developed into a Forensic Edition and an Enterprise Edition.
+
  
 
==License Notes==
 
==License Notes==
Line 33: Line 45:
  
 
= External Links =
 
= External Links =
 
+
EnCase Homepage - http://www.guidancesoftware.com/lawenforcement/ef_index.asp
+
[http://www.dibsusa.com/ Website]
  
 
==External Reviews==
 
==External Reviews==

Latest revision as of 03:54, 29 October 2008

DIBS

This Fort Worth based company makes forensics software and packages it with portable hardware for investigators in the field with desktop workstations for offices.

Website


Features

File Systems Understood

(unknown)

File Search Facilities

  • Lists allocated and unallocated files.
  • Sorts files by type.
  • Searches for keywords.
  • Registry Viewer

Historical Reconstruction

Can it build timelines and search by creation date?

Searching Abilities

  • Can use basic keyword searching.
  • Offers full-text indexing.

Hash Databases

  • Offers the "Hash Library-KFF".

Evidence Collection Features

Can it sign files? Does it keep an audit log?

History

License Notes

Is it commercial or open source? Are there other licensing options?

External Links

Website

External Reviews