-
autopsy
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
If the attorney needs to search for files by key terms, then a free to use analysis option is Autopsy (https://www.sleuthkit.org/autopsy/). Autopsy would need to be installed to the attorney's Windows workstation and then an Autopsy database of the forensic image file would need to be generated.
Related posts
-
Is there a way to recover data on a hard drive if it’s in unallocated?
-
E-Discovery
-
Noob here, tried adding via hash sets, but failed. Any idea on how to add in SHA1 values in the Metadata for Autopsy while viewing a outlook.pst file? I'm able to view the MD5 & SHA256 hash values of the file, however I'm unable to view the SHA1 value. Any advise would be greatly appreciated
-
Recover deleted photos? I dumped the FS image with adb
-
Free Tech Tools and Resources - Log Query GUI, Multicast Troubleshooter, Job Search & More