IT Forensics

Unlike the data acquisition tools here, WinTasks is intended to give administrators a view of the running state of a system, helping to identify and track malicious activity.

PC PhoneHome differs from the other tracking solutions in that it does not require an annual subscription and is totally self sufficient, reporting not to a tracking center but to the laptop owner. This reduces the cost and ensures a user can pass information onto the law enforcement officer as ...

The ComboDock is the sort of device that no forensic investigator can afford to be without if they intend to produce evidence that will be acceptable in legal proceedings.

EnCase from Guidance Software has established itself as the leading tool for forensic investigators. Perceiving a need for similar tools in the enterprise space, the company announced EnCase Enterprise Edition, bringing most of the functionality enjoyed by criminal forensic investigators to corporate users.

As an alternative to costly proprietary tools, we sourced a variety of open source software, with the goal of emulating as much of the feature-sets offered by closed source products, such as EnCase and ProDiscover.

A book about the inner workings of the hacker's mind would not be complete without mentioning the world's most famous hacker, Kevin Mitnick. This book does not disappoint in that respect. This book deals with getting inside the mind of a hacker. It a kind of "know your ...

This product uses a project-based approach to forensic activities that helps to ensure that evidence is gathered in an orderly, presentable fashion.

CyberAngel is actually one of several competing packages on the market in the U.S. and Canada that allows a central monitoring station to detect when an unauthorized access to a PC or notebook has taken place, and alerts the owner accordingly.

The range of freeware and open source resources continues to grow, offering tools for everything from simple add-ons to existing systems to wide-ranging, comprehensive forensic tool kits.

NetWitness is a network forensics and analysis package available in both software and appliance (really just a preconfigured server) formats.