A study on digital forensic tools

Digital Forensic Tools Used in Analyzing Cybercrime

“…The new technology over the world in computer and cellphones using communications and transferring and storing data. this data became more precious than ever for every institute and individual and because of that, and cybercrimes increase over time and its most sophisticated to identify the cybercriminal, new forensic tools need to keep abreast of developments features to the new technology and cybercrimes.As mentioned [2] these days, with the increase in data storage and processing, there is a great risk of losing it, and also data that is collected manually or through devices may be exposed to electronic attacks, with the presence of these dangers. There are many digital forensic tools through which evidence is collected and studied.…”

“…There are many digital forensic tools through which evidence is collected and studied. It was conducted a study by [2] on these tools that governments, companies, and people use to extract digital evidence through comparison based on different determinants so that the appropriate tool is chosen based on needs and the study also includes the problems facing the users of these tools. In this analysis or study for forensic tools, these tools are compared based on a list of parameters, based on study these tools does not cover all features that can be used for all situations in the case of study and cybercrime investigation to get all the evidence that can be found in the crime scene, the (EnCase) tool covers most benefits but not do live analysis and ( Pro-Discover tool ) although covers the live analysis but don't work on multiple OS like the previous tool and do not have feature mail analysis.…”

“…Because the crime occurred in virtual world now it called cyber-crime [2],because of that crime forensic tools founded to detect the cyber-criminal by collecting evidence based on [15] digital forensic models that categorized to at scene includes (planning, identification, collection, preservation) and in the lab includes (examination, analysis, report).Forensic Tools are categorized based on the environment and devices (computer forensic, mobile forensic, network forensic) and these classifications have subcategories as shown in Figure 2 Fig . 2…”

“…As [1] define this Encase is a tool used for collecting facts from various devices and discovers any possible digital evidence by extract the full evidence report. [2] is a tool created by guidance software its used in the whole world 93% of banks,1005 federal agencies ,75% power distributors and 80% of USA universities use it for investigation lifecycle.…”

“…According to [2] one of the most important rules that must be taken into account when collecting digital evidence and information using digital forensic tools is that will no change is happened in evidence obtained, and evidence collectors who use these tools should document all activities, in addition to the undertook to keep the original documents and preventing them from being modified or changed to preserve the evidence. In this research, a group of electronic forensic tools related to computers, networks, and portable devices were dealt with, and it was found that most of these tools cover specific aspects and do not cover other aspects in the search for evidence, just as there is no complete crime, there are also incomplete tools.…”