{"id":2,"date":"2018-09-01T10:43:39","date_gmt":"2018-09-01T10:43:39","guid":{"rendered":"https:\/\/josephnaghdi.com\/?page_id=2"},"modified":"2018-09-23T07:47:19","modified_gmt":"2018-09-23T07:47:19","slug":"computer-forensics-lab","status":"publish","type":"page","link":"https:\/\/josephnaghdi.com\/","title":{"rendered":"Computer Forensics Tools"},"content":{"rendered":"

Free computer forensic tools -Part I<\/b><\/h1>\n

List of over 140 free tools is provided as a free resource for all involved in computer forensics investigations<\/b><\/h2>\n

Computer Forensics Lab<\/a> offers no support or warranties for the listed software and it is the user\u2019s responsibility to verify licensing agreements. Inclusion on the list does not equate to a recommendation. Using forensic software does not, on its own, make the user a forensic analyst or the output court admissible. Evidence is more likely to be admissible if it is produced by a trained professional computer forensic analyst.<\/p>\n

List of security & computer forensics Linux distros:<\/b><\/h2>\n
    \n
  1. Kali Linux 2018\u00a0<\/b><\/li>\n
  2. Parrot Linux 4.1\u00a0<\/b><\/li>\n
  3. Backbox 5.1\u00a0<\/b><\/li>\n
  4. Samurai 3.3.2\u00a0<\/b><\/li>\n
  5. BlackArch\u00a0Linux 2016-06-01\u00a0<\/b><\/li>\n
  6. Pentoo\u00a02016\u00a0<\/b><\/li>\n
  7. Deft 8\u00a0<\/b><\/li>\n
  8. Caine 9 \u2013Fully featured\u00a0<\/b><\/li>\n
  9. Paladin Forensics 7.04\u00a0<\/b><\/li>\n
  10. Network Security Toolkit (NST) [Network forensics]\u00a0<\/b><\/li>\n
  11. SIFT Workstation by SANS Forensics (Includes super timeline tool LOG2TIMELINE); SIFT can be installed on top of UBUNTU.\u00a0<\/b><\/li>\n
  12. Helix Forensics by E-Fense<\/b><\/li>\n<\/ol>\n

    Some Common Tools:<\/b><\/p>\n

      \n
    1. USE brew install [name of the tool] to install Linux applications in Mac OS.<\/li>\n
    2. For memory analysis: \u201cvolatility<\/b>\u201d<\/li>\n
    3. For data recovery: \u201cforemost<\/b>\u201d or \u201cphotorec<\/b>\u201d<\/li>\n
    4. Show and save file metadata: \u201cexiftool<\/b>\u201d<\/li>\n
    5. For the file type: \u201cfile<\/b>\u201d<\/li>\n
    6. To display the file in\u00a0hexa\u00a0and see the magic bytes\/numbers: \u201chexdump<\/b>\u201d<\/li>\n
    7. To show printable characters in a file: \u201cStrings<\/b>\u201d<\/li>\n
    8. To see partition table: \u201cfdisk<\/b>\u201d or \u201cmmls<\/b>\u201d<\/li>\n
    9. For mounting image files: “osmount<\/b>“, \u201cmount\u201d or \u201cewfmount\u201d or \u201cxmount\u201d or \u201cbdemount\u201d<\/li>\n
    10. For website malware analysis \u201conline sandbox<\/b>\u201d<\/li>\n
    11. Online reputation website check \u201cvirustotal<\/b>\u201d<\/li>\n
    12. For network traffic and packet analysis: \u201cwireshark<\/b>\u201d (and sometimes \u201cTshark<\/b>\u201d)<\/li>\n
    13. For file listing, directory listing and reporting of files and directories: “Directory Lister<\/b>“<\/li>\n<\/ol>\n

      OPEN SOURCE INVESTIGATIVE TOOL: Autopsy \/Sleuth Kit<\/b><\/p>\n

      Below is the list of Autopsy features.<\/em><\/strong><\/p>\n