Computer Forensics Laboratory
  Main  "  Services  "  Case Studies  "  Tools  "  Contact Us  "  NISER

Windows | Linux Tools

Disclaimer:
The information in this document is provided "AS IS" without warranty of any kind. Any information provided is best within the knowledge at the time it was written. NISER is not and will not be accountable to any damage done in respect to the information provided. This document may refer to other sources provided by other organizations or people in order to assist the Internet users.

Imaging Analyser Recovery Anti Virus/Trojan
[Hard Disk] DIBS Analyser DBXtend [n/r] new  
DIBS Peru Disk Analyser [n/r] DBXtract [n/r]  
Disk Image Encase Pro Disk Commander [n/r]  
Encase Pro Hackman [n/r] EasyRecovery  
Ghost MyCroft [n/r] FinalData (Basic)  
  NTI Lost and Found  
  UltraEdit [n/r] MBXtract [n/r]  
[Floppy] WinHex [n/r] System Snapshot [n/r]  
CopyQM [n/r]      
DIBS FDI [n/r]      
Image [n/r]      
       
       
Device Locker Media Wiper Viewer/Editor System Maintanance
DIBLock [n/r] PDWipe [n/r] Drivespy [n/r] Diskeeper [n/r]
PDBlock   IrfanView System Mechanic [n/r]
    List [n/r]  
    Paint Shop Pro [n/r]  
    QuickView Plus  
     


DBXtend DBXtend is an enhancement of DBXtract that provides additional functionality.

DBXtract
MBXtract

Outlook Express has a proprietary binary format that makes archiving individual messages difficult. In addition, a number of people have indicated that their message folders have become corrupted and OE can not read them. Consequently, they have lost all the messages in that folder. DBXtract.exe/ MBXtract.exe extracts all mail and news messages from individual dbx/mbx files. After extracting the messages one can drag them from a Windows Explorer folder into an Outlook Express mail folder.

Homepage



DIBLock
DIBS Analyser
DIBS FDI
DIBS Peru
MyCroft

DIBS USA Inc produces the world's largest, most well-known and respected range of computer forensic hardware and software. Specifically designed to copy, analyze and present computer data in a forensically sound manner it has been in use for nearly a decade and evidence gathered using the equipment has been presented in courts around the world on thousands of occasions. It has never been rejected. Available as a series of modules, each designed for specific tasks.

Homepage



Disk Commander

Disk Commander performs a wide range of data recovery operations. Essential functions include locating and restoring lost or deleted files on an operating Windows system. Advanced functions include full-scale data salvage operations such as locating data on, and recovering data from, an unbootable, or even reformatted, hard disk.

FileRestore FileRestore is a simple, easy-to- use tool for recovering files that have been lost or deleted from your Windows system.
Homepage
http://www.winternals.com/



Disk Image Drive Image helps keep the data on your hard drive safe by creating an exact image of your hard drive for easy recovery, or upgrade to a new system.
Lost and Found Lost & Found is an easy, affordable and effective way to recover data. Lost & Found recovers and restores data from damaged or corrupted media in the event of a disk crash, a logical system failure, or even intentional or accidental data loss.
Homepage



Diskeeper A disk can become heavily fragmented, which means that files can become scattered across the disk in non- contiguous clusters and the heads must move considerably more when reading and writing a file. This fragmentation reduces overall disk performance. Diskeeper packs the fragments closer together to improve overall system performance. And with background option, user don't even know Diskeeper is currently working.
Homepage http://www.executivesoftware.com/



Diskspy DRIVESPY is a forensic DOS shell. It is designed to emulate and extend the capabilities of DOS to meet forensic needs. Whenever appropriate DRIVESPY will use familiar DOS commands (CD, DIR, etc) to navigate the system under investigation. When beneficial, DRIVESPY will extend the capabilities of the associated DOS commands, or add new commands as necessary.
PDBlock

PDBLOCK (Physical Drive BLOCKer) is a standalone utility designed to prevent unexpected writes to a physical disk drive. When PDBLOCK is executed on a computer its job is to prevent all writes to the physical drives.

PDWipe PDWIPE (Physical Drive WIPE) is a standalone utility to wipe (zero) an entire physical hard drives.
Image IMAGE is a standalone utility to generate physical images of floppy disks. The files which are generated by IMAGE, contain complete physical images of the diskette(s) being processed.
Homepage



EasyRecovery Pro Not all types of data loss require the assistance of an engineer. EasyRecovery" software provides you with a fast and easy, do-it-yourself software solution to recover your valuable data.
Homepage http://www.ontrack.com/



EnCase Pro EnCase features a graphical user interface that enables examiners to easily manage large volumes of computer evidence and view all relevant files, including "deleted" files, file slack and unallocated data. The integrated functionality of EnCase allows the examiner to perform all functions of the computer forensic investigation process, from the initial "previewing" of a target drive, the acquisition of the evidentiary images, the search and recovery of the data and the final reporting of findings, all within the same application.
Homepage



FinalData (Basic) Today, in the age of one PC per person, a corporation's valuable data is usually stored in each PC. Thus, it is crucial for a company to keep and handle its valuable data safely and take measures in advance to recover damaged data when a problem occurs. As the use of computers and the Internet increases, the damage data that can occur by mishandling, hacking, or viruses is increasing daily. FinalData can recover when data is deleted data in recycle bin or deleted by 'Shift+Delete'. It can recover directory and its file/sub directory when directory is deleted.
Homepage



Ghost Norton Ghost" provides high- performance utilities for fast and safe system upgrading, backup, and recovery. It writes disk images directly to many popular CD-R/ CD-RW drives, making it easy to back up your valuable data.
Homepage



Hackman Hackman is a hex editor and disassembler. It comes with cryptography capabilities, decoding with ready and self-made algorithms and a fully-featured editor. You can edit virtually any file or disk with the ease of a word processor.
Homepage



IrfanView IrfanView is a very fast FREEWARE (for non-commercial use) 32-Bit graphic viewer for Windows 9x/ME, WinNT, Win2000 and Windows XP. IrfanView feature are Thumbnails, Preview, Drag & Drop Support, fast Directory View (fast moving through directory), Print Support, Scan (TWAIN) Support, Slideshow, Batch conversion, change the color depth, audio CD player, Capturing, Cut/Crop, Effects (Blur, Sharpen etc.) and much more...
Homepage



List List can view files in ASCII or hex. Search for text in file. Select a file for viewing, copying, deleting, moving, or printing.
Homepage



NTI NTI has been supplying computer forensic and computer security risk assessment tools since 1996. In 1999, NTI completed its development of a suite of forensic tools for use with Windows NT systems.
Homepage



Paint Shop Pro Paint Shop Pro can easily retouch, repair, and edit photos with easy-to-use, high-quality, automatic photo enhancement features. Create and optimize Web graphics with built-in Web tools and artistic drawing and text tools. Easily add custom images to your home and business graphics projects. Save time with productivity tools: grids, guides, alignment, and grouping. Expand your creativity with over 75 special effects. Share photos electronically with friends and family via email, Web sites, and photo-sharing sites
QuickView Plus Now you CAN open virtually any file and email attachment with Quick View Plus. Views graphics, documents, spreadsheets, databases, presentations, zip files, and more. Gives you access to over 200 Windows, DOS, Macintosh, and Internet file types. Supports new formats including Visio, Project, Word, Excel, and Powerpoint 2000. Includes built-in zip program.
Homepage



System Mechanic Keep your PC running faster, cleaner, and error-free with System Mechanic's full set of 15 powerful tools built for Windows 95, Windows 98, Windows Me, Windows NT, Windows 2000 and XP.
Homepage



System Snapshot System Snapshot performs two useful functions. First it simplifies the process of backing up critical system files from your computer. When a PC crashes is it often not necessary to format and/or restore your entire hard drive. Instead, by restoring the Windows registry and other configuration files the system problems can be solved.
Homepage



UltraEdit UltraEdit is the editor for all your editing needs. UltraEdit is an excellent replacement for NOTEPAD and a lot more, with support for unlimited file sizes, 100,000 word spelling checker, full HEX editing capabilities, configurable syntax highlighting for programmers, column editing. UltraEdit handles multiple files at once, even if they are multi-megabyte files. It is Disk based and only requires a small amount of memory, even for very large files.
Homepage



WinHex WinHex is a powerful hexadecimal file, disk, and RAM editor. WinHex is also designed to serve as a low-level cloning, imaging, and disk analysis tool. WinHex is able to clone/image most drive formats, and supports drives and files of virtually unlimited size. It integrates CRC32 checksums, the common 128-bit MD5 message digest and even 256-bit strong one-way hashes to ensure absolute data authenticity and an uncompromised evidentiary procedure.
Homepage



[Home] [Linux Tools]




Disclaimers and copyright information