Digital Forensics and Incident Response - Second Edition

Software

There are a number of software tools on the commercial and freeware market today. The digital forensics laboratory should have access to several tools to perform similar functions. At a minimum, the lab should have software that can perform imaging of evidence drives, examine images, analyze memory captures, and report findings.

There are several different types of forensic software that a digital forensics analyst can utilize. The first of these is forensic applications. These applications are purpose-designed, to perform a variety of digital forensics tasks. They are often commercially available and are in wide use in the law enforcement and government communities, as well as in private industry. The following four forensic applications ...