...
Digital Processing Laptop (Alienware)
BitCurator:Guymager - The default disk imager for optical disks. Produces .E01 disk images
When beginning, read the BitCurator Quickstart Guide and other tutorials under "Documentation and Help" on the desktop.
BitCurator Disk Image Access, Mounter, and Reporting Tool - A trio of tools that allow you to work with media from imaging to processing. Not our primary method of processing. CCA Tools uses the Reporting Tool.
Bless Hex Editor - A hex editor. I typically use Super Hex Editor in Windows.
CCA Tools
- Disk Image Processor - Forensic analysis of disk images that uses fiwalkBitCurator Reporting Tool, Brunnhilde, and bulk_extractor (each are available as individual GUIs as well). A one-stop shop for disk image analysis.
- Folder Processor - Similar to Disk Image Processor, but for folders and exported files.
Windows:
FTK Imager - A disk imaging and analysis software. If Guymager does not create a working disk image, use FTK. Outputs .iso disk images. Useful for seeing the file structure of disks and exporting files.Guymager - The default disk imager for optical disks. Produces .E01 disk images.
LibreOffice - An open-source software suite we primarily use to view .csv files.
Windows:
Autopsy - "A digital forensics platform and graphical interface of The Sleuth Kit and other digital forensics tools" (sleuthkit.org/autopsy). Use this to view files (it renders text and photographs) and analyze disks/disk images. It can also be used for forensic analysis with added plug-ins.
Bagger - This tool creates bags of AIPs to be sent to tape.
DWG TrueView - An open-source .dwg tool that allows you to render CAD files. I have been able to render all versions found in the collection (1009-1021).
FTK Imager - A disk imaging and analysis software. If Guymager does not create a working disk image, use FTK. Outputs .iso disk images. Useful for seeing the file structure of disks and exporting files.
Super Hex Editor - A hex editor that allows you to redact PII/other information from files.
Teracopy - A copying tool that allows for secure copying of files.
XnViewMP/XnConvert - A photo-viewing tool that allows you to view images and their metadata. XnConvert allows you to convert image files in order to condense/erase potenial PII.