free/open source forensic software

[rothko]

hi,

I'm just about to start the second semester of the Forensic Computing and Security course at Derby Uni. I'm trying to get as much experience with Encase and FTK as possible and although I have access to both of these packages, it does mean travelling into uni, getting the license dongles, working around room timetables, etc.

So, I was wondering if anyone knows of any or uses any free or more affordable alternatives? Ideally they would be similar in design or functionality to either Encase or FTK and although I know it's no real substitute for experience with the real thing, it can't hurt to practice the basics.

thanks in advance,

Lee

[Disklabs]

There are a few other tools out there, the most notable being Helix, however, stick with FTK and Encase. Nothing else matters much in most forensics labs. Free tools are very rarely used.

It might be a pain, however, I can assure you that its definately worth the effort.

Regards,

Simon

[rothko]

thanks, Simon, that's good to know. I'll continue working through the EnCase Certified Examiner Study Guide while I have full access to EnCase through the uni.

Cheers, Lee

[Disklabs]

If you can get Encase Certified Expert, (ENCE) and Access Data Certified Examiner, (ACE) then you are 9/10th the way to a good job on a good salary.

I have just been told that to get ACE certification, its now FREE, its all done online. YOU HEARD IT HERE FIRST!

[Beerbaron]

If you can get Encase Certified Expert, (ENCE) and Access Data Certified Examiner, (ACE) then you are 9/10th the way to a good job on a good salary.

I have just been told that to get ACE certification, its now FREE, its all done online. YOU HEARD IT HERE FIRST!

Got any decent links to this stuff?

[Disklabs]

For information on ACE, (Access Data Accreditation), its best to contact Data Duplication ,(www.dataduplication.co.uk), ask for either Jackie or Andy, as they are the fountains of all knowledge when it comes to Access Data training and certifications etc...

Regards,

Simon

[Beerbaron]

Thanks.

If you can get Encase Certified Expert, (ENCE) and Access Data Certified Examiner, (ACE) then you are 9/10th the way to a good job on a good salary.

What do you class as a good salary?

[Disklabs]

For new starters, if you initially earn more than £18k you are doing well. If you are ENCE and have experience, you will be about £30k-ish.

That's based on my personal knowledge.

Regards,
Simon

[Beerbaron]

I'll have the fun of looking for a job within the next couple of months, its just where to start.

[Disklabs]

The most important advice you can get from anyone at all is to get some experience. Once you have some of that behind you, you will stand out from the croud - and of course have the opportunity to go for jobs that require experience.

Police forces are good places to start, (I believe that West Mercia are about to start looking, I also think that Lincoln are looking now).

Good luck.

Simon