[1] [2] [3] [4]

Forensics

Forensic Toolkit 1.4 by NT OBJECTives, Inc.
(Download)

Boot Disks
(DOS 6.21) (DOS 7.0) (Linux - no SCSI support) (Linux with SCSI support)
Cardserv - Disk Image Builder
(Download Cardserv) (Cardserv Install Instructions) (Download DiskImag zip file)

Directory Control (DOS)
(Download)

DOC - Documentation of Computer Evidence(DOS)
(Download) (Description)

EDITH - Active X Control to view binary files
(Download) (Description - Instructions)

HashKeeper - View hash on a disk
(Program) (Update) (Instructions) (Fixes) (To obtain current updates)

Ian Edit - RTF Viewer and Editor
(Download) (Description -Instructions)

ICHKSUM - calculates a 64-bit checksum for a disk drive
(Download) (Description - Instructions)

IDISKDUP - make an exact duplicate, byte-for-byte, sector-by-sector, of a removable diskette
(Download) (Description - Instructions)

IFREESPC - searches a FAT logical drive for any unallocated space, and saves those sectors into one or more files
(Download) (Description - Instructions)

ILIST - produces a list of all files and directories on a logical or physical drive - deleted entries, hidden, system, and read-only files and directories
(Download) (Description - Instructions)

IWIPE - completely erases any data or logical formatting information from a DOS or BIOS drive
(Download) (Description - Instructions)

InetPad - multitabbed text editor and fully-featured FTP client
(Download) (Description - Instructions)

Maresware Collate - Combines two identically formatted files
(Download) (Description - Instructions)

Maresware Compare - Compares two files sorted on the same sort field
(Download) (Description - Instructions)

Maresware CRCKit - Provides 32-bit CRC and 16-bit checksum for files
(Download) (Description - Instructions)

Maresware DiskCat -Traverses a disk and makes a catalog of all contents
(Download) (Description - Instructions)

Maresware EventLog - Makes a comma delimited file of the NT Event Log for easier viewing
(Download) (Description - Instructions)

Maresware FilBreak - Select sections of an input record and place them in a different output format
(Download) (Description - Instructions)

Maresware FilSplit - Copies every n'th record for evaluation purposes
(Download) (Description - Instructions)

Maresware Hash - Calculates the MD5 hash total of a file
(Download) (Description - Instructions)

Maresware HashCMP - Compares the two files evaluated with the Hash program
(Download) (Description - Instructions)

Maresware IsPGP - Searches a disk for PGP related files
(Download) (Description - Instructions)

Maresware MD5 - Similar to Hash program above with different output capabilities
(Download) (Description - Instructions)

Maresware MDIR - Complete directory listing of a disk - more functionality than DIR
(Download) (Description - Instructions)

Maresware MKTEMP - Create directories complete with nested subdirectories
(Download)

Maresware MODIFY - Modifies file attributes (takes the place of attrib)
(Download) (Description - Instructions)

Maresware RM - Removes files and cleanses disk
(Download) (Description - Instructions)

Maresware StrSearch - Searches any kind of file for target strings supplied by the user
(Download) (Description - Instructions)

Maresware UpCopy - Copies only newer files to a destination disk or directory
(Download) (Description - Instructions)

Prune - Clears unallocated space at end of file (DOS)
(Download) (Description - Instructions)

SeeJunk - Look at those unallocated bytes at end of file
(Download) (Description - Instructions)

Snipper - Copies any portion of a text screen to a printer or file
(Download) (Description - Instructions)

Split - Splits large files into smaller pieces to ease evaluation
(Download) (Description - Instructions)

S -Tools for Windows Ver2.0 - Set of tools to hide data within other formats
(Download) (Description - Instructions)

Ultra Edit V9.0 - Disk-based editor
(Download) (Description - Instructions)

V-Edit Plus - Disk-based editor for Win32 and DOS
(Download)

XVI32 - Hex Editor
(Download) (Description - Instructions)

YAHE - Yet Another Text Editor
(Download) (Description - Instructions)

Forensics - PDA Devices

3 Alarm Hack for Palm - Enhances alarms for the PALM Computing platform
(Download) (Description - Instructions)

AS400 Cheat Sheet - Commands for the AS400 platform for use with PALM devices
(Download) (Description - Instructions)

AS400 Commands - More commands for the AS400 platform for use with PALM devices
(Download)

ASCII Chart - character set and font display utility for PalmOS devices
(Download) (Description - Instructions)

BDicty- Basic dictionary for use with PalmOS devices
(Download) (Description - Instructions)

MobileDB for Palm - Installs a mobile version of an MS database viewer on your palm device
(Download)

Pilot-Link-Perl for Palm -Perl tools to communicate with a 3COM Pilot PDA over a serial port.
(Download) (Description - Instructions)

Forensics - Viewers

Quick-View Plus - View any file without worrying about macro viruses
(Download) (Description - Instructions)

Thumbs Plus - Scan folders or disks and make thumbnails of files found
(Download) (Description - nstructions)