Digital Forensic Tools Comparison / Function Disk imaging
J'aime 0
Compare Encase
Compare Encase
Lien | OSForensics | ProDiscoverBasic | WinHex | R-Studio | Active@FileRecovery | Active@Undelete | FTK Imager | Recuva | Autopsy |
---|---|---|---|---|---|---|---|---|---|
Time for creation (min:sec) | 04:55 | 07:43 | 07:29 | 05:04 | 03:05 | 06:20 | 05:00 | - | - |
File size (GB/MB/BYTES) | 7.48 GB | 7.47 GB | 7.48 GB | 68.5 MB | 446 bytes | 499 bytes | 1.46 GB | - | - |
Integrity verification | Oui | Oui | Oui | Non | Oui | Oui | Oui | - | - |
Supported Image Formats | Raw Image (.IMG, .DD) Split Raw Image (.00n) Advanced Forensics Format Images* (AFF) Advanced Forensics Format Images w/ meta data* (AFM) Advanced Forensics Format Directories* (AFD) VMWare Image (.VMDK) EnCase EWF (.E01) EnCase 7 EWF (.EX01) EnCase Logical EWF (.L01) EnCase 7 Logical EWF (.LX01) SMART EWF (.S01) VHD Image (.VHD) | Prodiscover format(.eve), Raw Image(.dd) | .whx, .e01, .dd | Byte-to-byte(.dsk), R-Drive Image Compatible(.rdr) | Active@FileRecovery Image compatible (.dim) | Active@Undelete Image Compatible(.dim) | E01, S01, and L01 AFF AD1 RAW/DD | - | - |
Avis utilisateurs et commentaires