Forensic Tools

After you make a verified copy of original media, you’re ready to begin analysis. The tools discussed in the following sections can perform many forensic functions. Your choice of tools depends on specific investigative needs. The following sections include common software and hardware tools and cover their capabilities.

As with disk imaging tools, your choice of tools to use depends on the following:

  • Operating system(s) supported
  • User interface preferences
  • Budget
  • Functionality/capabilities
  • Vendor loyalty

Software Suites

Several companies specialize in developing and providing forensic tools. These companies produce software and/or hardware with diverse functionality. Some suites of forensic software are tightly integrated and ...

Get Computer Forensics JumpStart, Second Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.