Dell and AccessData Launched New Forensics Toolkit

Dell and computer forensics specialists Access Data have released their new Dell Digital Forensics Platform and Forensic Toolkit 4.0 at the International Security and National Resilience (ISNR) exhibition in Abu Dhabi.

adWP_logo

“Today’s launch of the FTK 4.0 is a significant milestone that marks the next phase of our efforts here in the Middle East. This release, which is unlike any other previously seen in the region, enables court-cited digital investigations and is built for speed, analytics and accuracy,” said Simon Whitburn, VP International Sales at AccessData.

The new forensics tool expands on AccessData’s existing solutions, to provide a turnkey solution for a wide range of investigative operations, including processing of forensic images and email archives; registry analysis; file decryption, password cracking, image creation and report building.

AccessData offers two expansion modules with the new version-Cerberus, a malware triage technology that provides threat scores and disassembly analysis to determine both the behaviour and intent of suspect binaries, and Virtualization for relationship analysis in multiple display formats, including timelines, cluster graphs, pie charts and more.

“We developed the combined platform in response to significant customer demand, in large part from this region. Dell has worked with us to provide a turn key digital forensics solution that enables our clients to get mobile very quickly. Partnerships with such leading organizations will play a pivotal role in our expansion in the region,” said Whitburn.

Access Data: http://accessdata.com/

AccessData is the leading provider of E-Discovery, Computer Forensics and Cyber Security software for law firms, corporations and government agencies

Dell Digital Forensics

In digital forensics cases, Dell can provide the tools and resources you need to process digital evidence, quickly and reliably. Click the below link to learn more:

http://content.dell.com/us/en/fedgov/fed-solutions-digital-forensics

Read More

Locating & Correcting Disk Space Problems on NTFS Volumes in Windows 2000/XP/Vista

NTFS Volumes Problem:
At times, Windows 2000, XP, and Vista misreport the amount of Free Disk Space on a hard drive – whether it is an internal drive or external drive.

Cause:
There are several causes for this:

  • The cluster size of the NTFS volume is too large for the average-sized files that are being stored.
  • File attributes or NTFS permissions prevent files or folders from being either displayed or accessed when you use either Microsoft Windows Explorer or a Windows command prompt.
  • The folder path exceed 255 characters.
  • Folders or files contain invalid or reserved file names.
  • NTFS metafiles (such as the Master File Table [MFT]) have grown and cannot be unallocated.
  • Files or folders contain alternate data streams.
  • NTFS corruption causes Windows to report free space as being in use.
  • Other NTFS features cause file-allocation confusion.

Solution:
Microsoft provides various solutions for symptom identified. Reference Microsoft Knowledge Base Articles 315688 (for Windows XP) and 303079 (for Windows 2000) for more information.

Read More

Unfamiliar with raid architecture error replacement hard disk data recovery

Case:The customer originally discovered that the#4 hard disk was dropped, and the new hard disk replacement was purchased by themselves but because the architecture was not familiar with the original#1 hard disk, causing the system to collapse … Send to the data recovery center data recovery. Solution:After understanding the reasons, the engineer of the data…

Read More

Windows – How can I display all 8 NTFS timestamps?

I understand that there are 8 NTFS timestamps http://www.governmentsecurity.org/forum/topic/30896-frustrating-ntfs-time-stamp-forensics/   NTFS MACE (Modified, Accessed, Created and MFT Entry modified ) values  . NTFS comes with 8 time-stamp values 4 of which resides in  $Standard_Information attribute (SI) and the other 4 in $FILE_NAME  (FN) attribute of MFT entry. How can I display all 8? Solution: This…

Read More

Hard Disk Physical Bad Sector Bad Sector Successfully Recovered Hard Disk Data Recovery

Case:Customer computer host hard disk, the system goes into the Windows system desktop normally.But the hard disk physical failure is lost when the data is backup.There are more than 100 G data.However, the data file cannot be copied. When copying the error, I/O error is prompted. Solution:Data recovery engineer testing, the hard disk has a…

Read More