| Cache Reader for Internet Explorer | |
| Submit Date: 1/3/2002 3:29:03 PM | License Info: see website Price: see website |
| Short Description: Cache Reader for Internet Explorer (versions 5, 6) | |
| Web Link: http://www.talknet.de/~wolfgbaudisch/CR5.exe | |
| Home Page: http://www.talknet.de/~wolfgbaudisch/CacheReader.htm | |
Rating:  | |
| Submitted By: Wolfgang Baudisch | |
| Information: Cache Reader reads the index.dat file in the Temporary Internet Files (TIF) folder of Internet Explorer ® 5 or in any other folder selected and presents data as a synoptic table, either in chronological or alphabetical order. It shows the URLs of the pages stored in cache and the dates of latest visit. | |
| CD-R Inspector | |
| Submit Date: 1/3/2002 3:07:35 PM | License Info: commercial Price: see website - download version less cost |
| Short Description: CD Analysis and Forensic Tool | |
| Web Link: http://www.cdrom-prod.com/cd-r_inspector.html | |
| Home Page: http://www.cdrom-prod.com/ | |
| Rating: | |
| Submitted By: CERI Labs | |
| Information: Saves and restores the information for a disc. This allows a disc to be fully processed once and then later examined without the lengthy initial information gathering. This is specifically intended for use with data recovery services and for computer forensic applications where the same disc may need to be re-examined multiple times. In addition to simply displaying sectors, CD-R Inspector™ can search the entire surface of a disc for particular data in hexadecimal or character. This allows locating “hidden” information that may even be outside what is normally displayed when deleted or hidden files are shown in the directory listing. Scans all files on a disc for particular contents. This allows rapidly processing “unreadable” discs to locate certain types of files (GIF, JPG, ZIP, etc.) in the same manner as other hard disk forensic programs do. Improved display of hybrid Mac-PC discs to show the contents of multiple file systems on the same track. Will play and analyze CD+G graphic data streams. If you are developing a CD+G disc this may be of interest. All CD Text information is also displayed for audio discs. The Error Summary has been improved and enhanced to provide a graphic display of the results.
| |
| East-Tec FormatSecure 2001 | |
| Submit Date: 5/13/2001 1:11:22 AM | License Info: Trialware Price: $29.95 |
| Short Description: Don | |
| Web Link: http://www.east-tec.com/erprod/formatsc/ | |
| Home Page: http://www.east-tec.com/ | |
| Rating: | |
| Submitted By: George Pecherle | |
| Information: East-Tec FormatSecure 2001, in addition to formatting a drive, securely wipes the data in order to eliminate all sensitive information beyond recovery. The product goes beyond U.S. Department of Defense security standards and provides protection against all methods and equipment of data recovery. East-Tec FormatSecure 2001 features a very intuitive wizard interface and can securely format any floppy, ZIP or hard drive directly from Windows Explorer.
| |
| Encase 3.0 | |
| Submit Date: 12/18/2002 2:16:35 PM | License Info: Commercial Price: See Website |
| Short Description: A complete computer forensic solution | |
| Web Link: http://www.guidancesoftware.com/products/software/encaseforensic.shtm | |
| Home Page: http://www.guidancesoftware.com/ | |
Rating:  | |
| Submitted By: TUCOFS Referral Service | |
| Information: Award winning and validated by the courts, EnCase allows law enforcement and IT professionals to conduct a powerful, yet completely non-invasive computer forensic investigation. EnCase features a intuitive GUI that enables examiners to easily manage large volumes of computer evidence and view all relevant files, including "deleted" files, file slack and unallocated space. The solution effectively automates core investigative procedures, replacing archaic, time-consuming and cost-prohibitive processes and tools. | |
| Encase 4.0 | |
| Submit Date: 12/18/2002 2:18:24 PM | License Info: Commercial Price: See Website |
| Short Description: A complete computer forensic solution | |
| Web Link: http://www.guidancesoftware.com/products/software/encaseforensic.shtm | |
| Home Page: http://www.guidancesoftware.com/ | |
| Rating: | |
| Submitted By: TUCOFS Referral Service | |
| Information: Now with PST, NTFS file compression, Unix file, and RAID support! Award winning and validated by the courts, EnCase allows law enforcement and IT professionals to conduct a powerful, yet completely non-invasive computer forensic investigation. EnCase features a intuitive GUI that enables examiners to easily manage large volumes of computer evidence and view all relevant files, including "deleted" files, file slack and unallocated space. The solution effectively automates core investigative procedures, replacing archaic, time-consuming and cost-prohibitive processes and tools. | |
| Gargoyle 2.1 | |
| Submit Date: 4/15/2005 12:02:13 PM | License Info: Price: |
| Short Description: Super Charging Digital Investigations | |
| Web Link: http://www.wetstonetech.com/catalog/item/1104418/620819.htm | |
| Home Page: http://www.wetstonetech.com | |
| Rating: | |
| Submitted By: webmaster | |
| Information: Uncover a Hidden Digital Arsenal. Maximize your time. Streamline your Investigation. Identify nefarious intent. Determine Modus Operandi. Identify Incriminating evidence. Audit User Bahavior. Enforce Corporate Policy. | |
| History Reader for Internet Explorer | |
| Submit Date: 1/3/2002 3:25:07 PM | License Info: see website Price: see website |
| Short Description: History Reader for Internet Explorer (versions 4, 5 and 6) | |
| Web Link: http://www.talknet.de/~wolfgbaudisch/Download.htm | |
| Home Page: http://www.talknet.de/~wolfgbaudisch/HistoryReader.htm | |
| Rating: | |
| Submitted By: Wolfgang Baudisch | |
| Information: History Reader reads all information in the complete history database and presents you a list, either in chronological or alphabetical order. Furthermore, you can open any URL in Internet Explorer, add URLs to Favorites, copy URLs, print out or save the listing or selected ranges as text file. When you have edited and saved a list you can open this file again and use it in the same way as the original one saved before.
| |
| Inquire | |
| Submit Date: 4/15/2001 11:18:59 AM | License Info: Freeware Price: n/a |
| Short Description: Returns ESN for SCSI hard drives | |
| Web Link: http://www.sandersonforensics.co.uk/html/free_utilities.html | |
| Home Page: http://www.sandersonforensics.co.uk | |
| Rating: | |
| Submitted By: Paul Sanderson | |
| Information: Windows Application, which lists all SCSI hard drives accessible through the ASPI interface and their Electronic Serial Numbers | |
| SBConvert | |
| Submit Date: 7/30/2001 8:22:07 AM | License Info: Commercial Price: £25.00 |
| Short Description: Extracts and converts a SafeBack image from tape to BitStream files | |
| Web Link: http://www.sandersonforensics.co.uk/html/software.html | |
| Home Page: http://www.sandersonforensics.co.uk | |
| Rating: | |
| Submitted By: Paul Sanderson | |
| Information: Extract a SafeBack image from tape and write it to disk files in a BitStream/BIOS format.
Can be used to enable investigation with utilites such as ILook or AccessData FTK. | |
| SBRecover | |
| Submit Date: 4/17/2001 10:29:03 AM | License Info: Commercial Price: See Website |
| Short Description: A utility to recover data from damaged SafeBack image files. | |
| Web Link: http://www.sandersonforensics.co.uk/html/sbrecover.html | |
| Home Page: http://www.sandersonforensics.co.uk | |
| Rating: | |
| Submitted By: Paul Sanderson | |
| Information: SBrecover works by scanning through a SafeBack image file on disk looking for areas where the checksum computes and extracting these areas to a new image file. The new file is a BIOS dump type image, i.e. there are no internal checksums and this image file must be processed with a utility other than SafeBack (Linux dd, or other utilities, could be used to re-lay the image).
| |
| StegAlyzerAS | |
| Submit Date: 7/25/2005 11:26:45 AM | License Info: Single-user Price: |
| Short Description: Steganography Analyzer Artifact Scanner | |
| Web Link: http://www.sarc-wv.com/products.aspx | |
| Home Page: http://www.backbonesecurity.com | |
| Rating: | |
| Submitted By: Webmaster | |
| Information: Extend computer forensic examinations to include the search
for artifacts and signatures of digital steganography applications. This product includes a license to SAFDB which can also be purchased separately.
| |
| StegAlyzerSS | |
| Submit Date: 7/26/2005 3:24:36 PM | License Info: Single-user Price: |
| Short Description: Steganography Analyzer Signature Scanner | |
| Web Link: http://www.sarc-wv.com/products.aspx | |
| Home Page: http://www.backbonesecurity.com | |
| Rating: | |
| Submitted By: Webmaster | |
| Information: StegAlyzerSS detects 29 distinct signatures of steganography applications and also includes functions to identify file types that may be potential carrier files (i.e., may contain hidden information). Techniques and procedures available to extract information hidden with each of the 29 applications for which a signature exists. Contact the SARC for details and pricing.
| |
| Steganography Application Fingerprint Database (SAFDB) | |
| Submit Date: 7/26/2005 3:20:58 PM | License Info: Single-user Price: |
| Short Description: MS Access database that contains application profiles for 230 digital steganography applications and | |
| Web Link: http://www.sarc-wv.com/products.aspx | |
| Home Page: http://www.backbonesecurity.com | |
| Rating: | |
| Submitted By: Webmaster | |
| Information: SAFDB can be use to help the examiner determine if a
steganography application exists on seized or suspect storage media. If a
steganography application is found, chances are it was used to hide something. The application profiles in SAFDB can be consulted to determine the technique used to hide the information which may facilitate attempts to extract any hidden information. Copies of the steganography applications are available from the SARC's archives for use by the examiner and/or SARC technical staff to attempt hidden information extraction. | |
| Stego Suite 4.1 | |
| Submit Date: 4/15/2005 12:34:25 PM | License Info: See Website Price: See Website |
| Short Description: Superb Accurate Detection of Steganography | |
| Web Link: http://www.wetstonetech.com/catalog/item/1104418/619451.htm | |
| Home Page: http://www.wetstonetech.com/f/Stego_Training_Syllabus.pdf | |
| Rating: | |
| Submitted By: Webmaster | |
| Information: Steganography Investigator Training
Course Fee: $1795 Includes copies of Stego Suite„· and Gargoyle Investigator„· Standard Edition)
Please Call for Law Enforcement, Education and Bundled Training Discounts!
Upon completion of this intense two-day course, Investigators will have a complete understanding of the threat posed by the use of steganographic technologies in the current digital environment. Threats posed by criminals exploiting children, terrorists and crime organizations creating covert communication channels, and disgruntled company insiders are some of the topics that will be covered. Students also learn how to conduct a complete steganography investigation from suspicion to detection, analysis, cracking, and finally to recovery of the hidden information.
The course includes 6 hours of lecture, 6 hours of practical lab exercises and investigation, and a 2 hour written and practical exam. Students are provided their own laptop with all tools and laboratory exercises installed for the lecture and hands-on portions of the labs. In addition, all students receive complimentary fully licensed copies of WetStone¡¦s Stego Suite and Gargoyle Investigator Standard Edition software products, (including 1 year of software maintenance & updates), the steganography embedding tools used during the class, and a reference CD containing the training materials and lab exercises.
All participants are eligible to receive 1.6 CEU credits and a course completion certificate. Those sitting for, and passing WetStone¡¦s written and practical exam, receive a ¡¥Certified Steganography Examiner¡¦ certificate.
For WetStone¡¦s training schedule or to register for an upcoming training, please visit us at www.wetstonetech.com.
| |
| WINGREP | |
| Submit Date: 1/3/2002 3:36:21 PM | License Info: see website Price: see website |
| Short Description: Searching for strings quickly and painlessly | |
| Web Link: http://www.hurricanesoft.com/prod01.htm | |
| Home Page: http://www.hurricanesoft.com/ | |
| Rating: | |
| Submitted By: TUCOFS Referral Service | |
| Information: WinGREP is a utility intended to make searching for strings quick and painless. Regular Expressions are simple and fast to create with no characters to memorize or confuse. Search results can be viewed in your IDE, in the Hurricane Editor, or any other editor you choose. Hierarchical lists and Quick-Preview makes WinGREP fast and easy to use.
| |