Difference between revisions of "Paraben"
|Line 57:||Line 57:|
Revision as of 12:53, 3 April 2007
File Systems Understood
- Major Windows formats
- RAW format
Their tool for searching email ("Email Examiner") can pull apart these files:
- Outlook (PST)
- Outlook Express (DBX)
- AOL 6,7,8,9 (PFC)
- Mozilla Mail
- Fox Mail
- MSN Mail
- USENET newsgroups
File Search Facilities
Can it build timelines and search by creation date?
- With "Text Searcher". Offers complex queries and searching of slack space.
- Comes with an index building wizard.
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases? What sort of hash functions does it use?
Evidence Collection Features
- Offers a feature called "Case Agent Companion v1.0" for tracking what the case agent does.