Disk Software Tools

What are some free forensic disk examination tools? How would you set them up on your home computer? Are there disk images on the Internet that you can download to practice on?

 

 Forensic investigations are still complicated as you can obtain all the data that you can for the

proof and mitigation strategy. Here are some of the resources you'd need for computer

forensic investigators. The majority are free (Sachdeva, Et al, 2020).

Step-by-step explanation

 Forensic investigations are still complicated as you can obtain all the data that you can for the

proof and mitigation strategy. Here are some of the resources you'd need for computer

forensic investigators. The majority are free (Sachdeva, Et al, 2020).

Some free forensic disk examination tools:

Autopsy

Autopsy is a GUI-based digital forensic open source software to easily analyze hard drives

and mobile phones. Thousands of people worldwide use Autospy to investigate what has

actually happened on the device.

Encrypted Disk Detector.

Encrypted Disk Detector. It supports volumes encrypted by TrueCrypt, PGP, Bitlocker and

Safeboot.

FTK Imager

FTK Imager You can also use FTK Imager to create SHA1 or MD5 file hashes, export files

and directories from forensic images to disk, review and retrieve files that have been removed

from the Recycle Bin (provided that their data blocks have not been overwritten), and install

a forensic image in Windows Explorer to view its contents.

How to set them up on your home computer.

To set up a free forensic disk examination tool, simply download the tool and run the file. If

Windows prompts with User Account Control, click Yes. Click through the dialog boxes

until you click a button that says Finish. Finally, your tool should now be fully installed

Are there disk images on the Internet that you can download to practice on?

Yes, there are disk images on the Internet that you can download to practice on. They are

provided by websites such as:

Digital Corpora

https://digitalcorpora.org/

A website that offers a digital corpus for education and study in computer forensics. Disk

files, memory dumps and captures of the network packet are readily available. Under special

conditions, the use of the dataset is possible.

Technical, ENISA

HTTPS:/www.enisa.europa.eu/topics/trainings-for-cybersecurity-specialists/online-training-

material/technical-operational.eu/topics/trainings-for-cybersecurity-specialists/online-

training-material/technical-operational-materials

ENISA provides many excellent teaching resources, including photos for forensic training,

free of charge (Rana, Sansanwal, Khatter & Singh, 2017).

Computer Forensics CCIC Training

https://cci.calpoly.edu/2019-digital-forensics-downloads

For Windows and Android, the site offers pictures and instructional text. There's also a

"Laptop Image" Windows image that you can parse to answer a few questions. In Google

Docs, the questions were generated so that you could search your answers easily.