This page is a basic overview of the various software used to process born-digital collections. For more detailed instructions on each of these, refer to associated pages and how-tos. This page also contains information about software versions present in the Volz & Associates collection.
Volz & Associates, Inc. collection
...
Digital Processing Laptop
BitCurator:
Guymager - The default disk imager for optical disks. Produces .E01 disk images.
CCA Tools
- Disk Image Processor - Forensic analysis of disk images that uses fiwalk, Brunnhilde, and bulk_extractor. A one-stop shop for disk image analysis.
- Folder Processor - Similar to Disk Image Processor, but for folders and exported files.
Windows:
FTK Imager - A disk imaging and analysis software. If Guymager does not create a working disk image, use FTK. Outputs .iso disk images. Useful for seeing the file structure of disks and exporting files.
Autopsy - "A digital forensics platform and graphical interface of The Sleuth Kit and other digital forensics tools" (sleuthkit.org/autopsy). Use this to view files (it renders text and photographs) and analyze disks/disk images. It can also be used for forensic analysis with added plug-ins.
HexEdit
- A hex editor that allows you to redact PII/other information from files.