ILook

From Forensics Wiki
Revision as of 15:55, 21 March 2006 by Uwe Hermann (Talk | contribs)

Jump to: navigation, search

ILook is an all-in-one computer forensics suite currently maintained by the Internal Revenue Service (IRS). It is only available to US Government employees. The suite consists of the ILook External Imager (IXimager), an analysis program, and a few utilities.


Contents

Features

File Systems Understood

File Search Facilities

  • Lists allocated and unallocated files.
  • Sorts files by type.
  • Searches for keywords.
  • Works with compressed zip files.

Historical Reconstruction

Can it build timelines and search by creation date?

Searching Abilities

  • Searches for keywords.
  • Builds an index.

Hash Databases

Evidence Collection Features

History

  • Originally developed by (NAME), ILook was taken over by the IRS in (YEAR).

License Notes

External Reviews

External Links