#Prodiscover basic linux software#
#Prodiscover basic linux license#
#Prodiscover basic linux download#

ProDiscover Basic is available on the Technology Pathways website at the bottom of the linked page. If you're looking for a graphical Windows solution to work with, but aren't ready shell out the cash for a forensic package, I suggest you check out the free version of ProDiscover. I've had somewhat mixed results with an older version of PTK with regards to stability, but have not tried it for quite some time. A free version is available for non-professional use as well as a commercial version. Like Autopsy, it provides a graphical front-end for TSK, but does it using Ajax and provides a few more features. There is no direct support for using Autopsy in Windows, so you'll have to use a Unix based OS or other work-arounds suggested on the site.ДЄ newer entry on the scene for graphically working with TSK is the PTK browser. If you don't like working at the command line, Autopsy may be your answer. The Autopsy browser is a nice, free add-on for the Sleuth Kit. The most recent guide is two years old as of this post, but it still contains very relevant and helpful information. His work was a huge benefit to me as I was getting started and I still refer to parts of it today.

#Prodiscover basic linux download#

Barry not only provides a well-written, informative guide to using Linux and TSK in forensics, he also has training materials available for download so you can actually perform the exercises in the guide. Another resource is Barry Grundy's LinuxLEO website. TSK is used extensively in the SANS Computer Forensic Investigation and Incident Response course, and that was where I became most familiar with it.

It runs on Windows and Unix platforms.' TSK has more capabilities than can be covered in a single blog post, so I hope you'll check it out, read the docs and test it for yourself. From the Sleuth Kit features page: 'Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown. Most any investigation you perform can involve this collection of programs, which includes file system and volume tools. It is currently at version 3.2 and is continually maintained by Brian Carrier.

#Prodiscover basic linux software#

TSK is, to me anyway, the king of free forensics software packages. Other free tools besides these are out there and I have linked to a list of them later in this post.ДЄ collection of tools I learned about early on was The Sleuth Kit (TSK).

The tools I describe below are ones I personally use(d). I strongly encourage those just getting started to stay up with those resources. Cruising around the net and reading what others had to say on the various forums and blogs helped immensely. I always thought I'd get some training, but before that could happen the free ILook went the way of the Dodo and I had to find something else to learn with.ДЄfter completing the NW3C courses I described in the last post, I felt like I had a better idea of the types of software tools I needed. I never got comfortable with the software and never wound up using it on a case.

#Prodiscover basic linux license#

In this post, I will go over some of the free and low cost software you can use and related information.ДЄ few years ago when I was first starting to learn about forensics, I requested a license for the ILook program, which was free to law enforcement at the time.

In my last post, I talked about the various ways one can find training resources to assist in getting started in the field of digital forensics.