Difference between pages "ASR" and "Compression"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
(LZ1)
 
Line 1: Line 1:
 +
{{Expand}}
  
 +
== External Links ==
 +
* [http://www.coderforlife.com/ Microsoft Compression Formats]
  
=Features=
+
=== LZ1 ===
 
+
* [http://andyh.org/LZ1.html LZ1]
==File Systems Understood==
+
 
+
==File Search Facilities==
+
 
+
==Historical Reconstruction==
+
 
+
Can it build timelines and search by creation date?
+
 
+
==Searching Abilities==
+
 
+
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
 
+
==Hash Databases==
+
 
+
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
+
What sort of hash functions does it use?
+
 
+
==Evidence Collection Features==
+
 
+
Can it sign files? Does it keep an audit log?
+
 
+
=History=
+
 
+
Originally written in (YEAR), it has now developed into a Forensic Edition and an Enterprise Edition.
+
 
+
==License Notes==
+
 
+
Is it commercial or open source? Are there other licensing options?
+
 
+
= External Links =
+
 
+
EnCase Homepage - http://www.guidancesoftware.com/lawenforcement/ef_index.asp
+
 
+
==External Reviews==
+

Revision as of 02:09, 9 June 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

External Links

LZ1