TUCOFS - The Ultimate Collection of Forensic Software

A Complete Resource for Cyber Law Enforcement Technologies



Windows NT

Recovery


Byte Back
Submit Date: 4/5/2000 10:06:26 AM
License Info: commerical
Price: see website
Short Description: Powerful low level cloning, imaging, data recovery, and computer forensic tools.
Web Link: http://www.toolsthatwork.com/byte.htm
Home Page: http://www.toolsthatwork.com/
Rating:
Submitted By: Cybersnitch Webmaster
Information: Byte Back - Powerful low level cloning, imaging, data recovery, and computer forensic tools. Clones/images most drive formats, bypassing 8.4 GB limitation! Perform safe recoveries on hard disk, Zip, Jaz, Syquest, floppy, and more.

ConfigSafe
Submit Date: 4/5/2000 10:05:18 AM
License Info: commerical
Price: see website
Short Description: Recover from Registry corruption
Web Link: http://www.toolsthatwork.com/csafe.htm
Home Page: http://www.toolsthatwork.com/
Rating:
Submitted By: Cybersnitch Webmaster
Information: ConfigSafe - Software Configuration, Registry, and Asset Backup, Tracking, and Restore utility software for Windows 95/98 and Windows NT. Recover from Registry corruption and loss. Track changes to Registry and any file type including DLL, INI, EXE, SYS, and much more!

LOSTPASSWORD Recovery
Submit Date: 6/27/2000 1:53:59 PM
License Info: demos available (commerical)
Price: see website
Short Description: Recover passwords from all kinds of common applications!
Web Link: http://www.lostpassword.com/
Home Page: http://www.lostpassword.com/
Rating:
Submitted By: Cybersnitch Webmaster
Information: Recover passwords for these and plenty of other applications: Word97/2000, Excel97/2000, Word95/6/2, Excel95/5/4, Access2/95/97/2000, Windows NT 3.x, 4.x Outlook97/98/2000, Exchange, WinZip, PKZip, ZIP, VBA Visual Basic modules, Internet Explorer, FileMaker, Quicken, QuickBooks, Lotus 1-2-3, Lotus Organizer, Lotus WordPro, Backup, Project, MYOB, Paradox, ACT!, Mail, Schedule+, Money, WordPerfect

Mutilate File Wiper 2.92
Submit Date: 10/30/2001 8:56:59 AM
License Info: see website
Price: see website
Short Description: Shred sensitive files so they cannot be recovered / Wipe disk free space / Destroy browser tracks
Web Link: http://mutilatefilewiper.com/downloads/mutinstl.exe
Home Page: http://mutilatefilewiper.com
Rating:
Submitted By: Craig Christensen
Information: Mutilate shreds sensitive files so they cannot be recovered. Destroy previously deleted files on your hard drive using Mutilate's free space wiper. Mutilate's user-friendly makes wiping multiple files a breeze. Normal File Deletion is NOT secure. Deleting files merely removes the file system's pointer to the file, ALL THE DATA REMAINS ON YOUR HARD DRIVE. The remaining data can be easily recovered with data recovery or forensic software. Your sensitive files may also be vulnerable to advanced recovery techniques, EVEN WHEN OVERWRITTEN, by analyzing latent magnetic traces. Mutilate File Wiper is a file shredder or file eraser that securely deletes sensitive files. Use Mutilate to prevent attempts to recover sensitive deleted files from your hard drive by data recovery or forensic software. The program overwrites all bits in selected files, including cluster slack space, with binary 1's, 0's, and/or random bit patterns. Choose from three security levels and a customizable level with up to 297 overwrite passes. Mutilate supports complete folder deletions including subfolders. With Mutilate's disk free space wiper, you can even use Mutilate as a file remover to destroy previously deleted files on your hard drive. And, you can store up to thirteen folders in Power Mutilator for quick access to files or folders you target routinely.

SBRecover
Submit Date: 4/17/2001 10:29:03 AM
License Info: Commercial
Price: See Website
Short Description: A utility to recover data from damaged SafeBack image files.
Web Link: http://www.sandersonforensics.co.uk/html/sbrecover.html
Home Page: http://www.sandersonforensics.co.uk
Rating:
Submitted By: Paul Sanderson
Information: SBrecover works by scanning through a SafeBack image file on disk looking for areas where the checksum computes and extracting these areas to a new image file. The new file is a BIOS dump type image, i.e. there are no internal checksums and this image file must be processed with a utility other than SafeBack (Linux dd, or other utilities, could be used to re-lay the image).

Stego Suite 4.1
Submit Date: 4/15/2005 12:34:25 PM
License Info: See Website
Price: See Website
Short Description: Superb Accurate Detection of Steganography
Web Link: http://www.wetstonetech.com/catalog/item/1104418/619451.htm
Home Page: http://www.wetstonetech.com/f/Stego_Training_Syllabus.pdf
Rating:
Submitted By: Webmaster
Information: Steganography Investigator Training Course Fee: $1795 Includes copies of Stego Suite„· and Gargoyle Investigator„· Standard Edition) Please Call for Law Enforcement, Education and Bundled Training Discounts! Upon completion of this intense two-day course, Investigators will have a complete understanding of the threat posed by the use of steganographic technologies in the current digital environment. Threats posed by criminals exploiting children, terrorists and crime organizations creating covert communication channels, and disgruntled company insiders are some of the topics that will be covered. Students also learn how to conduct a complete steganography investigation from suspicion to detection, analysis, cracking, and finally to recovery of the hidden information. The course includes 6 hours of lecture, 6 hours of practical lab exercises and investigation, and a 2 hour written and practical exam. Students are provided their own laptop with all tools and laboratory exercises installed for the lecture and hands-on portions of the labs. In addition, all students receive complimentary fully licensed copies of WetStone¡¦s Stego Suite and Gargoyle Investigator Standard Edition software products, (including 1 year of software maintenance & updates), the steganography embedding tools used during the class, and a reference CD containing the training materials and lab exercises. All participants are eligible to receive 1.6 CEU credits and a course completion certificate. Those sitting for, and passing WetStone¡¦s written and practical exam, receive a ¡¥Certified Steganography Examiner¡¦ certificate. For WetStone¡¦s training schedule or to register for an upcoming training, please visit us at www.wetstonetech.com.

Tape Toolkit
Submit Date: 10/19/2001 12:13:11 PM
License Info: Commercial
Price: See website
Short Description: TTK - A Sector level viewer and search utility for SCSI tapes
Web Link: http://www.sandersonforensics.co.uk/html/software.html
Home Page: http://www.sandersonforensics.co.uk/
Rating:
Submitted By: Paul Sanderson
Information: A sector level viewer for SCSI Tapes. View a sector as ASCII, EBCDIC or Hex. Search for strings, hex or unicode. Copy ranges of bytes or whole tape files to disk.


Note - The products referenced at this site are provided by parties other than TUCOFS (or its affiliates). TUCOFS makes no representations regarding either the products or any information about the products. Any questions, complaints, or claims regarding the products must be directed to the appropriate author, manufacturer or vendor. Click here to view the usage terms and conditions. By accessing and using this website, you are agreeing to be bound by these terms.


TUCOFS - The Ultimate Collection of Forensic Software. Copyright (c) 1999 - 2010. All rights reserved. Reproduction in whole  or in part in any form or medium without express written permission of  Cyber Enforcement Resources Incorporated is strictly prohibited.  Terms and conditions.