Week 4 - Tools & Toolkits

Question 1

What are some broad categories that are the focus of some digital forensic tools?

Answer 1

Database forensics
Email analysis
Audio/video forensics
Internet browsing forensics
Network forensics
Memory forensics
File analysis
Disk and data capture
Computer forensics
Digital image forensics

Question 2

What is a digital forensics tool?

Answer 2

A tool that can be used investigate and examine a certain aspect of or type of data. It will most likely only be used for one type of category of analysis, like video/audio, file or network forensics.

Question 3

What are digital forensics toolkits?

Answer 3

An instrument that can analyse and investigate multiple different types of digital forensic evidence categories and data types. It is like having multiple tools in one.

Question 4

What are some examples of digital forensic tools?

Answer 4

Hash comparators - compare hash files of different files/images
Hex editors - view or search for data within non-text files
Disk imagers - create images of disks or partitions
Web cache viewers - extract and view web history
EXIF metadata extractors - extract and view EXIF data from images

Question 5

What are some examples of digital forensics toolkits?

Answer 5

The SANDS Investigated Forensic Toolkit (SIFT)
CrowdResponse
Volatility
The Sleuth Kit (And Autopsy)
FTK Imager
CAINE
DEFT
PlainSight 
HELIX3