Forensic Tools
After you make a verified copy of original media, you’re ready to begin analysis. The tools discussed in the following sections can perform many forensic functions. Your choice of tools depends on specific investigative needs. The following sections include common software and hardware tools and cover their capabilities.
As with disk imaging tools, your choice of tools to use depends on the following:
- Operating system(s) supported
- User interface preferences
- Budget
- Functionality/capabilities
- Vendor loyalty
Software Suites
Several companies specialize in developing and providing forensic tools. These companies produce software and/or hardware with diverse functionality. Some suites of forensic software are tightly integrated and ...
Get Computer Forensics JumpStart, Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
