Difference between revisions of "ILook"

From ForensicsWiki
Jump to: navigation, search
(Cosmetic. Added EULA.)
Line 1: Line 1:
iLook is an all-in-one computer forensics suite currently maintained by the Internal Revenue Service. Available only to US Government employees. The suite consists of the [[iLook_Imager]], an analysis program, and a few utilities.
+
'''iLook''' is an all-in-one [[computer forensics]] suite currently maintained by the [[Internal Revenue Service]] (IRS). Available only to US Government employees. The suite consists of the [[iLook_Imager]], an analysis program, and a few utilities.
  
  
== History ==
+
==History==
  
 
Originally developed by (NAME), iLook was taken over by the IRS in (YEAR).
 
Originally developed by (NAME), iLook was taken over by the IRS in (YEAR).
 
 
  
 
=Features=
 
=Features=
Line 32: Line 30:
 
==Hash Databases==
 
==Hash Databases==
 
   
 
   
* Hashes and compares with Hashkeeper using MD5. Also uses NIST NSRL library.
+
* Hashes and compares with [[Hashkeeper]] using [[MD5]]. Also uses [[NIST NSRL library]].
  
 
==Evidence Collection Features==
 
==Evidence Collection Features==
 
 
  
 
=History=
 
=History=
 
 
    
 
    
 
==License Notes==
 
==License Notes==
 
+
* [http://www.ilook-forensics.org/iLookv8eula.html EULA]
  
 
==External Reviews==
 
==External Reviews==
 
  
 
== External Links ==
 
== External Links ==
  
* Official Site - http://www.ilook-forensics.org/
+
* [http://www.ilook-forensics.org/ Official website]

Revision as of 16:20, 21 March 2006

iLook is an all-in-one computer forensics suite currently maintained by the Internal Revenue Service (IRS). Available only to US Government employees. The suite consists of the iLook_Imager, an analysis program, and a few utilities.


History

Originally developed by (NAME), iLook was taken over by the IRS in (YEAR).

Features

File Systems Understood

(unknown)

File Search Facilities

  • Lists allocated and unallocated files.
  • Sorts files by type.
  • Searches for keywords.
  • Works with compressed zip files.

Historical Reconstruction

Can it build timelines and search by creation date?

Searching Abilities

  • Searches for keywords.
  • Builds an index.

Hash Databases

Evidence Collection Features

History

License Notes

External Reviews

External Links