Software for Computer Forensics
Introduction
This software has been developed to assist practitioners in computer forensics. The software is provided free of charge. All software is stand alone and is usually delivered in a zip archive.
If the software fails to interpret data, it is probably due to a software enhancement since the release of my software.
I am willing (time permitting) to review any data that is not being correctly interpreted.I cannot offer any guarantee with the software.
Allan S Hay
Updates
ESP released 23/01/2012
FBID released 03/03/2012
N-SID released 29/03/2012
Disk Info v5 released 15/05/2012
Contact me
ash368
Site Update
15th May 2012
Software
OS (0)
VW7
Read in the Vista and Windows Seven Recycle Bin from a live OS, or a mounted image file, such as E01. FTK Imager v3 will mount your images to perform this function.
MD5: ac5c974b5eb247e07fea7e286c2fe319
DiskInfo v5 E-Tracker
Software to gather the Volume Serial Number from an attached device including CDs. V5 now includes a built in registry viewer (NTUSER, SAM, SYSTEM, SOFTWARE ) and disk explorer with multiple viewing formats.
MD5:90FC3E0643DE057E2CCCACC506F5BF2F
APFA v2.4
I have updated the Advanced Prefetch Analyser. The product can read Windows XP,Vista and Windows Seven Prefetch Files. v2.3 reads Layout
ini files in the Prefetch folder. New search function included and skinned in Office 2007.
MD5: 22A312A9CB73D9D4F2D972C2B69B7BF2
SIG..System Index Gatherer
Read in the Transaction Logs. If your files don't have (n).NTFY.gthr, where (n) is an number, it won't render the files. It will read in ANSI and Unicode 2 date fields. If you need 4 date fields, use SIGA (ANSI) only.
MD5: 217299a1c8c021c6c736aa755c409516
INFO2 Viewer
Read in the v5 INFO2 files which includes a built in Hex Viewer to verify offsets etc. Data can be exported to HTML. If you need to view v4 INFO files (Windows 9x) go to POC page.
MD5:AB8F9DDA0F69FECADE467926D4E7C0F2
OS (1)
You are viewing the text version of this site.
To view the full version please install the Adobe Flash Player and ensure your web browser has JavaScript enabled.
Need help? check the requirements page.
