http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b?format=rss Tribe.net. Local Connections http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#d1ea8549-64cf-4d71-aa1c-6955da883495 I like FTK as well. I recently attended NetSec Conferrence at the Hyatt in SF, and AccessData was there. I picked up a demo of FTK, Password Recovery Toolkit, Distributed Network Attack, WiprDerive and Registry Viewer all on one CD. I like the way FTK is set up, especially when it comes to organization and presentation for my clients. VERY easy to read and understand. Fri, 18 Jun 2004 15:43:24 GMT http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#d1ea8549-64cf-4d71-aa1c-6955da883495 b0neZ 2004-06-18T15:43:24Z http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#12686483-95c4-48dc-b905-6142b1d7584a We've been using FTK (Forensics ToolKit) in class, and it's pretty good. FTK will read SMART and EnCase image file formats, and it's a lot cheaper for a license than EnCase. I really like EnCase's Timeline features though... For free, Sleuthkit and Autopsy can't be beat, and I believe are included on the FIRE and Knoppix distros. I wrote a tutorial for my class on how to get Sleuthkit and Autopy running on Windows (under Cygwin), so if you're interested, it's hosted on my web site at http://www.memophage.net Sun, 13 Jun 2004 04:27:22 GMT http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#12686483-95c4-48dc-b905-6142b1d7584a Charles 2004-06-13T04:27:22Z http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#1fccd8af-3010-49e4-ba50-a22b5ee316dd I'm playing with LAS from localareasecurity.com and INSERT (check www.distrowatch.com). Otherwise, Knoppix. Fri, 07 May 2004 13:06:16 GMT http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#1fccd8af-3010-49e4-ba50-a22b5ee316dd $item.owner.firstName 2004-05-07T13:06:16Z http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#936d3728-47ae-43c4-8d27-49fc00529eb5 Just a quick one... What is everyone's software of choice for file recovery? I use En-Case and BadCopyPro at work, but since I am a poor student :) I fall back on some open source tools included with Linux's FIRE distro or Knoppix for home or consulting work. Mon, 03 May 2004 16:56:36 GMT http://computerforensics.tribe.net/thread/e1d002de-3db5-4a43-961a-58d9fceb366b#936d3728-47ae-43c4-8d27-49fc00529eb5 Mike 2004-05-03T16:56:36Z