Computer Forensics Defined

“Computer Forensics deals with the preservation, identification, extraction and documentation of computer evidence.”*

“Computer forensics has also been described as the autopsy of a computer hard disk drive because specialized software tools and techniques are required to analyze the various levels at which computer data is stored after the fact.”*

Recovering Information the naked eye can no longer see.

Read More

Computer Forensic Tool: EnCase Forensic

Computer Forensic Tool: EnCase ForensicEnCase Forensic is for forensic practitioners who need to conduct efficient, forensically sounds data collection and investigations using a repeatable and defensible process. EnCase Forensic lets examiners acquire data from a wide variety of devices, unearth potential evidence with disk level forensic analysis, and craft comprehensive reports on their findings, all while maintaining the integrity of their evidence.

How EnCase® Forensic Works:

1) Obtain Forensically Sound Acquisitions
EnCase® Forensic produces an exact binary duplicate of the original drive or media, then verifies it by generating MD5 hash values for related image files and assigning CRC values to the data. These checks and balances reveal when evidence has been tampered with or altered, helping to keep all digital evidence forensically sound for use in court proceedings.

2) Save Valuable Time with Advanced Productivity Features
Examiners can preview data while drives or other media are being acquired. Once the image files are created, examiners can search and analyze multiple drives or other media simultaneously. EnCase Forensic also features a case indexer. This powerful tool builds a complete index in multiple languages, allowing for fast and easy queries. Indices can also be chained together to find keywords common to other investigations. This Unicode-supported index contains personal documents, deleted files, file system artifacts, file slack, swap files, unallocated space, emails and web pages. In addition, EnCase has extensive file system support, giving organizations the ability to analyze all types of data.

3) Customize EnCase® Forensic with EnScript® Programming
EnCase forensic features EnScript® programming capabilities. EnScript, an object-oriented
programming language similar to Java or C++, allows users create to custom programs to help
them automate time-consuming investigative tasks, such as searching and analyzing specific
document types or other labor-intensive processes and procedures. This power can be harnessed by any level of investigator by using one of Forensics tools, such as the “Case Developer” or one of the numerous built-in filters and conditions.

4) Provide Actionable Data, Report on it, and Move on to the Next Case
Once investigators have bookmarked relevant data, they can create a report suitable for
presentation in court, to management or to another legal authority. Data can also be exported in multiple file formats for review.

EnCase Forensic is trusted by corporations, law enforcement, and government. EnCase Forensic is fast, powerful, forensically sound, and proven in courts worldwide.

EnCase Forensic Related Links:

Website: http://www.guidancesoftware.com/forensic.htm
Resource: EnCase® Forensic for Law Enforcement (PDF)

Read More

Norton Online Backup

Norton Online Backup Norton Online Backup automatically protect and remotely store your files at their secured data centers. Norton Online Backup also provides you convenience by giving you more ways to securely access and share your files anytime you have an internet connection.

Norton Online Backup Overview:
Storage: 25GB
Operating System: Windows 7 / XP/ XP Pro / Vista /Mac OS X v10.5+
Delivery: Download
Price: $49.99/Year (Protect up to 5 PCs)
Coupon Code: 15NORTONSTORE (Get 15% off)

Norton Online Backup Main Features:

  • Delivers easy-to-use, professional-grade, backup protection for your files
  • Lets you access your files from any Internet-connected computer
  • Makes transferring files between computers a breeze
  • Works with both Windows and Mac computers
  • Simplifies file sharing
  • Lets you search backup sets for specific files by keyword
  • Saves older versions of your backed up files

How does Norton Online Backup works:
Download and install Norton Online Backup client to get started protecting documents, music, videos and digital photos with automated online backup that’s easy to use.

Norton Online Backup Reviews:

Useful Links:

Low price on Amazon.com: $19.99 (Save $30.00. This is the cheapest price. Norton Online Backup 2.0 1User/25GB )

Read More

How can I test my hard drive for defects or problems in a Mac?

Mac systems have an excellent diagnostic utility included in the operating system called Disk Utility. You can find Disk Utility within the Utilities folder inside the Applications folder on the boot drive. You can also find this utility by booting directly to the operating system installation CD/DVD.

1. Go to Disk Utility and click on it.

Disk Utility

2. Choose the drive you wish to test by selecting the drive or partition on the left window pane and then selecting the First Aid tab.

Disk Utility

3. Click Verify Disk to check a drive/partition for errors but not repair them.
4. Click Repair Disk to check a drive/partition for errors and repair any that it finds.
5. Click Verify Disk Permissions to check the permissions on a drive/partition but not repair any errors.
6. Click Repair Disk Permissions to check the permissions on a drive/partition and repair any errors.

Note: You cannot check or repair permissions on a FAT32 (MS-DOS) partition. Only the Mac OS Extended (HPFS+) file system supports permissions.

Read More