Difference between pages "MacQuisition Boot CD" and "Compression"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m (Blackbag moved to MacQuisition Boot CD)
 
(LZ1)
 
Line 1: Line 1:
{{Infobox_Software |
+
{{Expand}}
  name = MacQuisition Boot CD |
+
  maintainer = [[BlackBag Technologies, Inc.]] |
+
  os = [[MacOS]] |
+
  genre = [[Live CD]] |
+
  license = ??? |
+
  website = [http://www.blackbagtech.com/software_boot_cd.html blackbagtech.com/software_boot_cd.html] |
+
}}
+
  
The '''MacQuisition Boot CD''' is a forensic [[Boot CD]]/[[Live CD]] built for imaging [[Macintosh]] systems.
+
== External Links ==
 +
* [http://www.coderforlife.com/ Microsoft Compression Formats]
  
=Features=
+
=== LZ1 ===
 
+
* [http://andyh.org/LZ1.html LZ1]
==File Systems Understood==
+
 
+
* For Macs! Produces a [[dd]] image.
+
 
+
==File Search Facilities==
+
 
+
==Historical Reconstruction==
+
 
+
Can it build timelines and search by creation date?
+
 
+
==Searching Abilities==
+
 
+
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
+
 
+
==Hash Databases==
+
 
+
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
+
What sort of hash functions does it use?
+
 
+
==Evidence Collection Features==
+
 
+
Can it sign files? Does it keep an audit log?
+
 
+
=History=
+
 
+
==License Notes==
+
 
+
Is it commercial or open source? Are there other licensing options?
+
 
+
= External Links =
+
 
+
==External Reviews==
+

Revision as of 02:09, 9 June 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

External Links

LZ1