Re: Forensic tool to recommend?

["Carlos Madrid" <chalonga () gmail com>]

LiveCD:
http://www.remote-exploit.org/backtrack_download.html
You'll probably have the best luck with: Autopsy

Expensive forensics tool:
http://www.guidancesoftware.com/products/ef_index.aspx

-los

On 5/29/07, Fabio Cerullo <fcerullo () gmail com> wrote:
> Hi All,
>
> I am evaluating some tools for gathering evidence in Linux and Windows distros.
>
> In particular I am interested in recovering files/folders which have
> been deleted "accidentally" from the PC.
>
> I am aware there are some Live CD's with Linux installed that could
> mount a drive and try to recover those files but don't know anyone in
> particular.
>
> Any help will be really appreciated.
>
> Thank you very much.
>
> Greetings,
>
> Fabio