http://www.forensicswiki.org/w/index.php?title=LinEn&feed=atom&action=history 2013-05-20T22:25:09Z Revision history for this page on the wiki MediaWiki 1.20.3 http://www.forensicswiki.org/w/index.php?title=LinEn&diff=5731&oldid=prev 2011-03-18T00:46:30Z

<p>Removed broken link to Guidance Software, added a link to EnCase Forensic</p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 00:46, 18 March 2011</td> </tr><tr><td colspan="2" class="diff-lineno">Line 35:</td> <td colspan="2" class="diff-lineno">Line 35:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.digitalintelligence.com/software/guidancesoftware/encase/ Official website]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.digitalintelligence.com/software/guidancesoftware/encase/ Official website]</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>* [http://www.guidancesoftware.com/<del class="diffchange diffchange-inline">support/articles/acquire_safely.asp How to Acquire a Drive Safely</del>]<del class="diffchange diffchange-inline">, </del>by Guidance Software</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>* [http://www.guidancesoftware.com/<ins class="diffchange diffchange-inline">forensic EnCase Forensic Software</ins>] by <ins class="diffchange diffchange-inline">[[</ins>Guidance Software<ins class="diffchange diffchange-inline">]</ins>]</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div><del class="diffchange diffchange-inline">* [http://www.guidancesoftware.com/support/articles/acquire_safely.asp#hd2 Using LinEn</del>]</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==External Reviews==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==External Reviews==</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Category:Disk imaging]]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Category:Disk imaging]]</div></td></tr> </table>

Razomatic http://www.forensicswiki.org/w/index.php?title=LinEn&diff=5730&oldid=prev 2007-04-22T12:49:54Z

<p>Cleaned up initial description, added another external link</p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 12:49, 22 April 2007</td> </tr><tr><td colspan="2" class="diff-lineno">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>'''<del class="diffchange diffchange-inline">Tool Name</del>''' is <del class="diffchange diffchange-inline">LinEn, short for </del>Linux <del class="diffchange diffchange-inline">Encase imager</del>.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>'''<ins class="diffchange diffchange-inline">LinEn</ins>''' is <ins class="diffchange diffchange-inline">a [[</ins>Linux<ins class="diffchange diffchange-inline">]] version of the normally [[DOS]] based [[EnCase]] acquisition tool. It has roughly the same functionality as the DOS version</ins>. &#160;</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>&#160;</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>=Features=</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>=Features=</div></td></tr> <tr><td colspan="2" class="diff-lineno">Line 37:</td> <td colspan="2" class="diff-lineno">Line 36:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.digitalintelligence.com/software/guidancesoftware/encase/ Official website]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.digitalintelligence.com/software/guidancesoftware/encase/ Official website]</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.guidancesoftware.com/support/articles/acquire_safely.asp How to Acquire a Drive Safely], by Guidance Software</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.guidancesoftware.com/support/articles/acquire_safely.asp How to Acquire a Drive Safely], by Guidance Software</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* [http://www.guidancesoftware.com/support/articles/acquire_safely.asp#hd2 Using LinEn]</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==External Reviews==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==External Reviews==</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Category:Disk imaging]]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Category:Disk imaging]]</div></td></tr> </table>

Jessek http://www.forensicswiki.org/w/index.php?title=LinEn&diff=5729&oldid=prev 2007-04-22T03:12:26Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 03:12, 22 April 2007</td> </tr><tr><td colspan="2" class="diff-lineno">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>'''Tool Name''' is <del class="diffchange diffchange-inline">a ..</del>.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>'''Tool Name''' is <ins class="diffchange diffchange-inline">LinEn, short for Linux Encase imager</ins>.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> </table>

Simsong http://www.forensicswiki.org/w/index.php?title=LinEn&diff=5728&oldid=prev 2007-04-07T22:40:40Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 22:40, 7 April 2007</td> </tr><tr><td colspan="2" class="diff-lineno">Line 35:</td> <td colspan="2" class="diff-lineno">Line 35:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>= External Links =</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>= External Links =</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>[http://www.guidancesoftware.com/support/articles/acquire_safely.asp How to Acquire a Drive Safely], by Guidance Software</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">* [http://www.digitalintelligence.com/software/guidancesoftware/encase/ Official website]</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">* </ins>[http://www.guidancesoftware.com/support/articles/acquire_safely.asp How to Acquire a Drive Safely], by Guidance Software</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==External Reviews==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==External Reviews==</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">[[Category:Disk imaging]]</ins></div></td></tr> </table>

Jessek http://www.forensicswiki.org/w/index.php?title=LinEn&diff=5727&oldid=prev 2006-12-16T14:24:10Z

<p>‎<span dir="auto"><span class="autocomment">Hash Databases</span></span></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 14:24, 16 December 2006</td> </tr><tr><td colspan="2" class="diff-lineno">Line 19:</td> <td colspan="2" class="diff-lineno">Line 19:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>What sort of hash functions does it use? &#160;</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>What sort of hash functions does it use?</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>&#160;</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">It can calculate an MD5 hash.</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==Evidence Collection Features==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>==Evidence Collection Features==</div></td></tr> </table>

Joachim Metz http://www.forensicswiki.org/w/index.php?title=LinEn&diff=5726&oldid=prev 2006-11-07T18:09:36Z

<p></p> <p><b>New page</b></p><div>'''Tool Name''' is a ...<br /> <br /> <br /> =Features=<br /> <br /> ==File Systems Understood==<br /> <br /> ==File Search Facilities==<br /> <br /> ==Historical Reconstruction==<br /> <br /> Can it build timelines and search by creation date?<br /> <br /> ==Searching Abilities==<br /> <br /> Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?<br /> <br /> ==Hash Databases==<br /> <br /> Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?<br /> What sort of hash functions does it use? <br /> <br /> ==Evidence Collection Features==<br /> <br /> Can it sign files? Does it keep an audit log?<br /> <br /> =History=<br /> <br /> ==License Notes==<br /> <br /> Linen is released under a proprietary license. It is included as part of the freely downloadable [http://www.e-fense.com/helix/ Helix] live CD.<br /> <br /> = External Links =<br /> <br /> [http://www.guidancesoftware.com/support/articles/acquire_safely.asp How to Acquire a Drive Safely], by Guidance Software<br /> <br /> ==External Reviews==</div>

Hans