Basic Forensics Software...?

Travler · 01-15-2009, 01:35 PM

Can anyone suggest some basic forensic software? I'm thinking of something that might be able to glean when files were created / modified, and perhaps being able to read index.dat files?

TIA

hammer1 · 01-16-2009, 10:19 AM

http://www.guidancesoftware.com/products/ef_index.asp

**sobeit** · 01-17-2009, 12:43 AM

you can get the created and modified from windows explorer, just right click the current column header

Travler · 01-19-2009, 08:14 AM

Thanks for the link.

I'm aware of the Windows information. I am looking for something that might go a little further than just the last date modified. For instance, all modifications and by who, etc.

01-15-2009, 01:35 PM	#1 (permalink)
Travler Registered User Join Date: Nov 2008 Posts: 6 OS: XP Pro	Basic Forensics Software...? Can anyone suggest some basic forensic software? I'm thinking of something that might be able to glean when files were created / modified, and perhaps being able to read index.dat files? TIA

01-16-2009, 10:19 AM	#2 (permalink)
hammer1 Registered User Join Date: Feb 2006 Posts: 71 OS: XP	Re: Basic Forensics Software...? http://www.guidancesoftware.com/products/ef_index.asp

01-17-2009, 12:43 AM	#3 (permalink)
sobeit TSF Enthusiast Join Date: Nov 2007 Location: NEAR Posts: 7,433 OS: windows/linux	Re: Basic Forensics Software...? you can get the created and modified from windows explorer, just right click the current column header __________________ there's been global warming since the ice age

01-19-2009, 08:14 AM	#4 (permalink)
Travler Registered User Join Date: Nov 2008 Posts: 6 OS: XP Pro	Re: Basic Forensics Software...? Thanks for the link. I'm aware of the Windows information. I am looking for something that might go a little further than just the last date modified. For instance, all modifications and by who, etc.