Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page is a basic overview of the various software used to process born-digital collections. For more detailed instructions on each of these, refer to associated pages and how-tos. This page also contains information about software versions present in the Volz & Associates collection.

Volz & Associates, Inc. collection

...

Digital Processing Laptop

BitCurator:

Guymager - The default disk imager for optical disks. Produces .E01 disk images.

CCA Tools

  • Disk Image Processor - Forensic analysis of disk images that uses fiwalk, Brunnhilde, and bulk_extractor. A one-stop shop for disk image analysis.
  • Folder Processor - Similar to Disk Image Processor, but for folders and exported files.

Windows:

FTK Imager - A disk imaging and analysis software. If Guymager does not create a working disk image, use FTK. Outputs .iso disk images. Useful for seeing the file structure of disks and exporting files.

Autopsy - "A digital forensics platform and graphical interface of The Sleuth Kit and other digital forensics tools" (sleuthkit.org/autopsy). Use this to view files (it renders text and photographs) and analyze disks/disk images. It can also be used for forensic analysis with added plug-ins.

HexEdit

  • A hex editor that allows you to redact PII/other information from files.