Advertisement
Just a quick one...
What is everyone's software of choice for file recovery?
I use En-Case and BadCopyPro at work, but since I am a poor student :) I fall back on some open source tools included with Linux's FIRE distro or Knoppix for home or consulting work.
What is everyone's software of choice for file recovery?
I use En-Case and BadCopyPro at work, but since I am a poor student :) I fall back on some open source tools included with Linux's FIRE distro or Knoppix for home or consulting work.
Advertisement
Advertisement
-
Unsu...
Re: Favorite Recovery Software
Fri, May 7, 2004 - 6:06 AMI'm playing with LAS from localareasecurity.com and INSERT (check www.distrowatch.com). Otherwise, Knoppix.
-
Re: Favorite Recovery Software
Sat, June 12, 2004 - 9:27 PMWe've been using FTK (Forensics ToolKit) in class, and it's pretty good. FTK will read SMART and EnCase image file formats, and it's a lot cheaper for a license than EnCase. I really like EnCase's Timeline features though...
For free, Sleuthkit and Autopsy can't be beat, and I believe are included on the FIRE and Knoppix distros. I wrote a tutorial for my class on how to get Sleuthkit and Autopy running on Windows (under Cygwin), so if you're interested, it's hosted on my web site at www.memophage.net -
-
Re: Favorite Recovery Software
Fri, June 18, 2004 - 8:43 AMI like FTK as well. I recently attended NetSec Conferrence at the Hyatt in SF, and AccessData was there. I picked up a demo of FTK, Password Recovery Toolkit, Distributed Network Attack, WiprDerive and Registry Viewer all on one CD. I like the way FTK is set up, especially when it comes to organization and presentation for my clients. VERY easy to read and understand.
-