Question

Case Project 14-5: Forensics Tools Search the Internet for websites that advertise computer forensic tools. Locate reviews of four tools. Create a chart that lists the tool, the type of data that it searches for, its features the cost, etc. Which would you recommend if you could purchase only one tool and budge" were not a concern?

Answer 1

ANS: I used to search internet resources for finding Computer forensic Tools using for fraud detection and digital security applications along with retrieval of Digital evidence in Criminology as a court of evidence from Hard drives/Smart Phones/mail boxes or social media accounts in cyber threat cases and concluded the following four tools with Data Search,Features etc

Forensic Tool Name	Data Searched	Advantages	Limitations	Cost
Encase	1. EnCase is an item which has been intended for legal sciences, advanced security, security examination, and e-disclosure use. 2.Encase is usually used to recover verification from held onto hard drives. 3.Encase empowers the pro to guide a start to finish examination of customer records to assemble advanced proof can be utilized in an official courtroom.	· 1.It is a very user friendly tool. Encase wins the race here as well by supporting the analyst with user friendly interface. · 2.With the paid version of Encase which supports all utilities, it also has a free version which can be used for evidence acquisition which is very easy to use. This tool is known as the Encase Imager. · 3.In terms of processing and analysis features, this tool also has good reporting functionalities built into it. · 4.With the increase in cyber threats, encryption plays a significant role in securing data in any type or kind of system. Encase has built in support for almost all types of encryption including Bitlocker, MacAfee, Symantec, Sophos etc. · 5.Good keyword searching capabilities and scripting features are available. ·	· 1.This is an over the top expensive device. · · 2.Encase handling can take a great deal of time if there should arise an occurrence of exceptionally enormous compound documents and letter drops. · · 3.The most recent forms of Encase once in a while are not perfect with other criminological based devices. · · 4.There is a lot of utilization of Encase for portable legal sciences.	Expensive but Free Version also available
Forensic Tool Kit	1.The Forensic Toolkit, or FTK, is a PC legal examination programming bundle made by AccessData. 2.It inspects a hard drive via looking for changed data. 3.It can, for example, find erased messages and can likewise check the plate for content strings. 4 These would then be able to be utilized as a mystery catchphrase reference to break any encryption. 5.The tool compartment consolidates a free circle imaging program called the FTK Imager. 6.It spares a picture of a hard plate in one archive or in various portions which would then be able to be reproduced later. 6.It registers MD5 hash esteems and certifies the respectability of the data before shutting of the records. The result is a picture file(s) that can be spared in a few configurations.	· 1.It has a straightforward UI and progressed looking through capacities. · · 2.FTK underpins EFS unscrambling. · · 3.It creates a case log record. · · 4.It has noteworthy bookmarking and striking announcing highlights. · · 5.FTK Imager is free.	· 1.FTK doesn't bolster scripting highlights. · · 2.It doesn't have performing multiple tasks capacities. · · 3.There is no advancement bar to assess the time remaining. · · 4.FTK doesn't have a course of events see.	Paid Version only available
XWF(X-Ways)	1.X Ways Forensics is an amazing, business Computer Forensic Tool. 2.It is a Windows based authorized programming which offers numerous functionalities relating to PC crime scene investigation. 3.Perhaps the best bit of leeway of this product is that it very well may be utilized in a compact mode.	· 1.Proof preparing alternatives can be modified according to the prerequisites of the case. · · 2.It has an entirely adaptable and granular separating alternatives just as exceptionally adjustable hunt capacities. · · 3.It is compact in nature and it checks for new highlights all the time	· 1.The UI is mind boggling. · · 2.It is a dongle based programming and doesn't work without it. · · 3.There is no help for Bitlocker.	Licensed Version Available
The Oxygen Forensic Suite	1.The Oxygen Forensics bundle is a portable crime scene investigation programming for coherent assessment of cell phones, 2.PDAs and PDAs. The suite can separate gadget data, contacts, schedule occasions, SMS messages, event logs, and records. 3.Similarly, it can likewise remove different kinds of metadata which is significant in any advanced criminological examination. 4.The suite gets to the gadget by using exclusive conventions.	· 1.Oxygen takes into account physical extraction data and information from Android gadgets. · · 2.The UI and choices are extremely basic and clear to comprehend. · · 3.The last report can be spared in different decipherable organizations such .xls, .xlsx, .pdf, and so on. · · 4.It is a financially better choice when contrasted with other portable criminological instruments. · · 5.It has a worked in usefulness that can be utilized to break passwords for encoded iTunes, bolted iPhone or android reinforcements.	· 1.Its help for scope of cell phones is constrained. · · 2.Since instrument is PC based, there is a higher likelihood of infection/malware entering inside the telephone that is being inspected. · · 3.It utilizes a beast power strategy which acquire a great deal of time to finish the procedure.	Paid

I will Prefer EnCase for Computer Forensic Investigation due to its simplicity of use and Multi dimensional/views support for report generation and also suitable for mobile gadgets .