Advanced

Computer Forensics: Linux Style!

Posted by gsh on · 1 comment
OSWeekly.com; By Matt Hartley
Mail this story
Print this story

Which OS do you think is best for computer forensics? Obviously, being as we are Linux users, we'd likely recommend admins consider using a Linux-based approach for such a task. But which applications are honestly available on this platform? Not only that, are any of them open source?

It's right there in black and white, a Canadian computer forensics company using both closed and open source tools to get the evidence from a target hard drive. But one thing I found interesting about the security expert described in the article was the apparent use by the industry of a Windows application called EnCase.

Full Story

  Nav
» Read more about: Story Type: Editorial; Groups: Linux

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (1)

Not bad for a MH article. Not only is a FOSS toolkit completely auditable at the source code level, you can run your forensics tools from a bootable CD-R or DVD-R, which means they cannot be altered. I can't imagine running anything like this that has to stand up to a legal test on Windows, or from a writeable medium.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post