TUCOFS - The Ultimate Collection of Forensic Software

A Complete Resource for Cyber Law Enforcement Technologies



Windows XP

Computer and Internet Crime


SBConvert
Submit Date: 7/30/2001 8:22:07 AM
License Info: Commercial
Price: £25.00
Short Description: Extracts and converts a SafeBack image from tape to BitStream files
Web Link: http://www.sandersonforensics.co.uk/html/software.html
Home Page: http://www.sandersonforensics.co.uk
Rating:
Submitted By: Paul Sanderson
Information: Extract a SafeBack image from tape and write it to disk files in a BitStream/BIOS format. Can be used to enable investigation with utilites such as ILook or AccessData FTK.

SBRecover
Submit Date: 4/17/2001 10:29:03 AM
License Info: Commercial
Price: See Website
Short Description: A utility to recover data from damaged SafeBack image files.
Web Link: http://www.sandersonforensics.co.uk/html/sbrecover.html
Home Page: http://www.sandersonforensics.co.uk
Rating:
Submitted By: Paul Sanderson
Information: SBrecover works by scanning through a SafeBack image file on disk looking for areas where the checksum computes and extracting these areas to a new image file. The new file is a BIOS dump type image, i.e. there are no internal checksums and this image file must be processed with a utility other than SafeBack (Linux dd, or other utilities, could be used to re-lay the image).

StegAlyzerAS
Submit Date: 7/25/2005 11:26:45 AM
License Info: Single-user
Price:
Short Description: Steganography Analyzer Artifact Scanner
Web Link: http://www.sarc-wv.com/products.aspx
Home Page: http://www.backbonesecurity.com
Rating:
Submitted By: Webmaster
Information: Extend computer forensic examinations to include the search for artifacts and signatures of digital steganography applications. This product includes a license to SAFDB which can also be purchased separately.

Steganography Application Fingerprint Database (SAFDB)
Submit Date: 7/26/2005 3:20:58 PM
License Info: Single-user
Price:
Short Description: MS Access database that contains application profiles for 230 digital steganography applications and
Web Link: http://www.sarc-wv.com/products.aspx
Home Page: http://www.backbonesecurity.com
Rating:
Submitted By: Webmaster
Information: SAFDB can be use to help the examiner determine if a steganography application exists on seized or suspect storage media. If a steganography application is found, chances are it was used to hide something. The application profiles in SAFDB can be consulted to determine the technique used to hide the information which may facilitate attempts to extract any hidden information. Copies of the steganography applications are available from the SARC's archives for use by the examiner and/or SARC technical staff to attempt hidden information extraction.

WetStone Technologies, Inc
Submit Date: 7/15/2005 6:17:05 PM
License Info: See Website
Price: See Website for Pricing
Short Description: Intelligent Solutions for Digital Investigations
Web Link: http://www.wetstonetech.com/catalog/item/1104418/2347979.htm
Home Page: http://www.wetstonetech.com/f/LiveWire_Training_Syllabus.pdf
Rating:
Submitted By: Webmaster
Information: LiveWire Investigator Training Course Fee: $8995 (Includes copies of LiveWire Investigator™, LiveDiscover and Gargoyle Investigator Enterprise Edition) Please Call for Law Enforcement, Education and Bundled Training Discounts! Live digital investigation of a suspect system is the next generation technique for Forensic Examiners, Compliance Auditors, Private Investigators, federal, state and local Law Enforcement Investigators, prosecutors and corporate IT security personnel. LiveWire Investigator and it’s associated suite of products, a commercially available offering borne of DoD research and expert engineering and forensic techniques, provides extensive and comprehensive information regarding information contained on ‘live-running’ networks, computers, servers and network enabled devices. Throughout this intensive LiveWire Training Course, students learn the ‘do’s and don’t’s’ of live evidence collection and preservation, are taught to understand legal precautions and concerns, and also become skilled at the use of those tools necessary to conduct a digital investigation of this magnitude. Students are given simulated situations where they learn how to analyze and tailor the LiveWire Investigator information and reports to determine evidence, malicious software or cyber weapon use activity, or potential insider attack scenarios. The course includes 8 hours of lecture, 8 hours of practical lab exercises and investigation. Students are provided their own laptop with all tools and laboratory exercises installed for the lecture and hands-on portions of the labs. In addition, all students receive complimentary fully licensed copies of LiveWire Investigator, LiveDiscover, Gargoyle Investigator, and a certificate of attendance. Those sitting for, and passing WetStone’s written and practical exam, receive a ‘Certified Live Examiner certificate. For WetStone’s training schedule or to register for an upcoming training, please visit us at www.wetstonetech.com.


Note - The products referenced at this site are provided by parties other than TUCOFS (or its affiliates). TUCOFS makes no representations regarding either the products or any information about the products. Any questions, complaints, or claims regarding the products must be directed to the appropriate author, manufacturer or vendor. Click here to view the usage terms and conditions. By accessing and using this website, you are agreeing to be bound by these terms.


TUCOFS - The Ultimate Collection of Forensic Software. Copyright (c) 1999 - 2010. All rights reserved. Reproduction in whole  or in part in any form or medium without express written permission of  Cyber Enforcement Resources Incorporated is strictly prohibited.  Terms and conditions.