Evaluation: HxD Hex Editor
The user interface of the editor is laced with menu driven selection of the available commands which is very helpful even for the lay man and is meeting the standard of the Microsoft products. Microsoft products are renowned as user friendly.
I am very much impressed and felt very convenient with its menu options as well as tool bars containing small icons representing commands functionality. UI is created professionally as per standards. It has all the common commands normally each software should equipped of e.g. resize window, copy, paste, delete.
I used it to analyze the data structure of the floppy disk stored in an image file. But despite this it also supports the disks as well as images. It gives you more convenient to open the software executable files which are loaded in the RAM portion.
Advantages:
1.User friendly interface.
2.Standardized as compare to Microsoft Products.
3.Supports the disk , image , RAM
4.Flexible display options.
5.Support is available.
6.Very strong find and replace option.
7.Very Fast Processing.
Disadvantages:
1.Help is missing in the software
2.Only available for Windows Operating System
Evaluation: R-Studio
I have been using R-Studio for the last 3 years. I found it very useful tool to recover my lost data. I have used this software in very critical situations when my hard drive was infected with virus and the operating system got corrupt. I have recovered all my important data using very simple steps. Despite the simple data recovery features it has included more advanced features which are very valuable.
Advantages:
1.Supported all the data formats.
2.Connect to remote file system.
3.Image files support
4.Create Option
5.Detailed view of all the drives
6.Built in Hex Editor
7.RAID support
8.File formats support
9.Supported other operating systems windows as well as Linux
Disadvantages:
1.Did not find any.
Evaluate: GetDataBack
A user interface is typically based on wizards in addition to menu and tool bar. It is supported limited formats of the hard drive i.e. FAT, NTFS. I used this software only to recover deleted or lost files. It has very limited options and does not support damaged data recovery. But the results of the recovery are dramatically up to the standards. The user interface is required to be improved.
Advantages:
1.Support of Physical drives, Image files, Remote Physical drives.
2.Create image file
3.FAT, NTFS
Disadvantages:
1.UI
2.Only FAT, NTFS
3.Difficult in use.
4.Linux
Evaluate: ILOOK
ILook is incredibly functional tool for forensic investigation. The ILook is used by FBI for forensic investigations. The latest version is available for the law enforcement agencies. This is my unique experience to use this software as a Forensic investigation tool in my assignment. It has the feature to analyze a lot of operating system formats. We need to create an image to analyze or investigate the data of the criminal. In this tool you can manage different cases simultaneously. It has supported a wide range of file formats and the facility to create your own customized file format. It is a complete solution you can recover data from the disk and it automatically placed same file type in the related folder. After that there is provision to view the contents of the recovered file in external or internal viewer. It is an excellent tool for investigation which enhances the capability of the investigator in every dimension to analyze the electronic data during his investigation process.
Advantages:
1.Ability to accomplish forensic investigation.
2.Comprehensive tool in its functionality.
3.Customized Hex editor selection option.
4.All the activity is recorded in log files
5.Provision to use customized scripts
6.NTFS Encrypted files
7. Virtual folders
8.Disk View
9.String search
10.Destruct drive
11.Reporting facility in html or word file format.
12.Thumbnail view of files
Disadvantages:
1.UI need to be more users friendly and attractive.
2.Tool bar can be added.
3.Linux
4.Graphical representation of Evidence.
5.Search criteria reports can be added.
No comments:
Post a Comment