Computer Forensics Investigation tools (part 2)

As a computer forensics investigator, you need some hardware tools to function effectively.

One main goal of computer forensics hardware is efficiency in terms of speed.

A computer forensics investigator spends most of their time on mundane work, like waiting for imaging processes and looking for information.  The speed in your computer forensics investigation is critical. The faster your computer is, the quicker you could do a lot of these tasks.

Another goal of computer forensics hardware is its capacity.

Due to the nature of your investigation, your computer forensics hardware needs more memory and storage. It also requires extra bays and slots.

Another goal is compatibility

In your investigation, you will come across many different types of operating systems and software applications. You will also have to deal with different kinds of hardware pieces.

The final goal is mobility or portability

As a computer forensics investigator, you need to accomplish some initial tasks when you show up at a crime scene. That’s why most of the hardware you need should be portable.

Depending on where you conduct your computer forensics investigation, you can have a full-blown computer forensics workstation, especially when the investigation is conducted in a lab environment. However, when you’re at a crime scene, you’ll need a scaled-down version of this type of hardware especially in the form of a field-kit.

One of the major elements of this type of field-kit is a laptop configured as a computer forensics work station.

There is also some miscellaneous computer forensics hardware such as flashlight, anti-static evidence bags, cameras, chain of custody forms and cables and screwdrivers. You’ll need anti-static evidence bags when you’re dealing with sensitive electronic parts of your evidence if they are not properly protected. These electronic parts could be short-circuited and won’t be able to be used as your evidence. To protect these parts you need an anti-static evidence bag.

There is more specialized computer forensics-related equipment. But the hardware we have discussed so far is a minimum set of equipment you need as a computer forensics investigator.

A huge part of becoming a CFI is to be familiar with all the major computer forensics software.

Types:

   1. Commercial

• EnCase forensics
• toolkit
• ProDiscover

  2. Open-source and free

• Autopsy
• Digital forensics framework

Computer forensics software tool types:

based on the comprehensiveness of the features they provide

1. When the software tool provides all the features or most of the features necessary for you to conduct a computer forensics investigation we call them a computer forensics software suite. Such as EnCase, FTK, ProDiscover, Autopsy, and DFE

 

 

2. computer forensics utilities that focus only on a single aspect of a computer forensics investigation. Such as FTK, DiskExplorer (only obtaining an image of an evidence drive), and Hexworkshop.

 

Secure Your Organization’s Mind with Securemind.se