Favorite Recovery Software

topic posted Mon, May 3, 2004 - 9:56 AM by  Mike
Share/Save/Bookmark
Advertisement
Just a quick one...
What is everyone's software of choice for file recovery?

I use En-Case and BadCopyPro at work, but since I am a poor student :) I fall back on some open source tools included with Linux's FIRE distro or Knoppix for home or consulting work.
posted by:
Mike
Mississippi
Advertisement
Advertisement
  • Re: Favorite Recovery Software

    Sat, June 12, 2004 - 9:27 PM
    We've been using FTK (Forensics ToolKit) in class, and it's pretty good. FTK will read SMART and EnCase image file formats, and it's a lot cheaper for a license than EnCase. I really like EnCase's Timeline features though...

    For free, Sleuthkit and Autopsy can't be beat, and I believe are included on the FIRE and Knoppix distros. I wrote a tutorial for my class on how to get Sleuthkit and Autopy running on Windows (under Cygwin), so if you're interested, it's hosted on my web site at www.memophage.net
    • Re: Favorite Recovery Software

      Fri, June 18, 2004 - 8:43 AM
      I like FTK as well. I recently attended NetSec Conferrence at the Hyatt in SF, and AccessData was there. I picked up a demo of FTK, Password Recovery Toolkit, Distributed Network Attack, WiprDerive and Registry Viewer all on one CD. I like the way FTK is set up, especially when it comes to organization and presentation for my clients. VERY easy to read and understand.

Recent topics in "Computer Forensics"

Topic Author Replies Last Post
Phoenix OWASP July/August Meetings obnosis 0 July 2, 2009
Forensic schools? Nathan 8 March 27, 2009
Serious Problems..... Brennesiology 2 July 15, 2007
Getting real-world experience Noah 0 February 24, 2006