2013 digital forensic tools

Cellebrite UFED Touch Ultimate

Cellebrite UFED Touch Ultimate

Strengths: This device is easy to use, fast, portable and powerful. Weaknesses: A bit pricey for smaller organizations. Could use a direct export to a media forensic format, such as dd.
ADF Solutions Triage-G2

ADF Solutions Triage-G2

Strengths: Easy and quick to configure and use. Weaknesses: Collection speed was good, but for a very large suite of machines to be tested the process could become time consuming.
Cyber Security Technologies Mac Marshal

Cyber Security Technologies Mac Marshal

Strengths: These products make it easy to investigate a Mac, dual-boot or virtualized OS running on the Mac. Weaknesses: There is little documentation with the product or on the website to help users get started.
CRU WiebeTech Forensic ComboDock v5

CRU WiebeTech Forensic ComboDock v5

Strengths: Fast and knowledgeable support team. Tool that performs as expected. Weaknesses: Perhaps a bit expensive for its feature set.
NIKSUN NetDetector/NetVCR Alpine 4.2.1

NIKSUN NetDetector/NetVCR Alpine 4.2.1

Strengths: Extremely simple and powerful. Excellent support from NIKSUN, including videos and tutorials on how to use the product. Weaknesses: Costly for some organizations, but worth it.
Technology Pathways ProDiscover Incident Response 7.4

Technology Pathways ProDiscover Incident Response 7.4

Strengths: Simple setup, quick imaging, great support and ease of use. Weaknesses: Tradeoff of quick imaging with longer times to open specific folder/file paths.
HBGary Responder Professional

HBGary Responder Professional

Strengths: The powerful tools included provide easy and insightful access to volatile memory. Weaknesses: Deployment and data acquisition could be optimized slightly. Can be pricey for general use in the average security department.
AccessData Forensic Suite

AccessData Forensic Suite

Strengths: A host of tools that enable a thorough and organized investigation. Weaknesses: Some of the software tools may not be quickly understood by beginners.
IntaForensics Lima Forensic Case Management Software

IntaForensics Lima Forensic Case Management Software

Strengths: Highly customizable, ensuring that the needs of both the public and private sector can be met. Weaknesses: Installation may be challenging for non-technical users without training.
Guidance Software EnCase Forensic v7

Guidance Software EnCase Forensic v7

Strengths: A solid computer/media/mobile device forensic tool with a history of experience. Weaknesses: Can be dicey to set up in a network environment with multiple other products’ CodeMeter dongles running on a networked license server.

Here's a quick look at the pros and cons of some of the digital forensic tools currently on the market, as reported by the SC Lab team.

More Slideshows

Topics:

You must be a registered member of SC Media US to post a comment.