Technology Meets Science with Computer Forensics Software
Computer forensics software is used to retrieve hidden or deleted files to obtain information for use in criminal investigations. By gathering metadata through such processes as disk imaging or creating drive content tables, law enforcement can gather vital clues to help build their cases.
Brands of Software
Brands of computer forensics software include EnCase Forensic by Guidance Software and X-Ways Forensics by X-Ways Software Technology. Each of them offers different options for forensic use and are powerful tools to detect and thwart intrusion.
EnCase Forensic is used by military organizations and intelligence agencies. It can perform forensics on Windows, Linux and OS X operating systems. It can retrieve data deleted from a file or from a hard drive that has been reformatted.
X-Ways Forensics uses a data mapping utility that analyzes items such as folders and text, regardless of whether they have been removed from the system. It retrieves and backs up information, then “scrubs” the data to obtain whatever search criteria is needed. It can be used on any type of storage device, including mobile phones and thumb drives.
Popularity: 2%