Forensic Video Software
In of the Digital Forensic Survival Podcast Michael Leclair talks about his favourite tools for OS X forensics. He presents a wide list of forensic tools, which can be used for solving common problems, such as imaging, file analysis, data carving, decryption, email analysis, etc.
Here is the full list of tools discussed in the podcast: – Automated Mac Forensics, RAM Imaging, Search features, Live Imaging and Timeline generation. – Free imaging option. Offers remote imaging feature where client boots system and examiner can access to complete imaging tasks.
You can use it for Fusion drives though you have to reassemble in terminal afterwards. – Low level file explorer.
DCFLDD – for imaging in Terminal. – automated datacarving. Xcode – free from Apple, OS X add-on. SQLITE Database Browser – Firefox has a plugin that works well (off line). Stellar Phoenix Data recovery tools – one of the best I have found for comprehensive data recovery, resurrecting formatted volumes, etc. PASSWARE – for attacking Filevault2 protected volumes and Keychains.
Forensic video analysis - dTective, from Ocean Systems powered by Avid, is an affordable, powerful and easy to learn uncompressed video evidence analysis, processing and redaction solution. Perform forensic video and audio analysis on any number of digital and analog sources.
– metadata parser. – hex editor.
Forensic Video Software Free Download
– Another option for searching mounted DMGs on a Mac that offers options Spotlight does not. – Email converter.