Explain how it might help forensic operations in finding evidence for digital crimes.

For this paper, the object is to review digital hardware
tools for performing forensic analysis of digital information in a small
organization. The tools should be able to copy the contents of a hard drive,
find and recover files deleted from a hard drive, determine history of web
sites visited, search a computer’s hard drive for key words, compare contents
of files on the computer’s hard drive, copy contents of other storage devices,
and log the activities performed.

Here are some tools to evaluate:
AccessData FTK Imager
AccessData Forensic Toolkit
EnCase
ProDiscover
DFF, https://tools.kali.org/forensics/dff

Once you have explored two of the tools, answer the
following questions in a 3 pages:

Provide a brief description of the tool and what it is
supposed to do
Explain how it might help forensic operations in finding
evidence for digital crimes
Describe the possible advantages of using this tool
Describe the possible drawbacks of using this tool
Provide an example of its application.

Last Completed Projects