Compaq
or Gateway computers do not make good general examination machines.
They contain proprietary hardware and a BIOS that may not be compatible
with other hardware and computers. However, a Compaq or Gateway computer
is normally necessary to examine a computer of the same brand.
Minimum
Software Requirements:
-
Our
FSUITE forensic utilities (provided with enrollment)
-
DataLifter*
(provided with enrollment) - Link
to DataLifter
-
QuickView
Plus (a viewing application) - Link
to QuickView Plus
-
Norton
Utilities (Diskedit and Unerase)
-
Norton
Ghost 2002 or newer
- A
password unlocking utility
In
order to complete the course you will be required to purchase:
-
Norton
Utilities (Diskedit and Unerase)
-
Norton
Ghost 2002 or newer
-
QuickView
Plus (a viewing application) QuickView
Norton's
System Works 2002 Professional (or newer) contains Norton Utilities, Norton's Ghost and
a good virus scanning utility. We would suggest purchasing System Works
2002 Professional, instead of purchasing each Norton utility separately.
The cost will be less. We estimate that the utilities that you must
purchase will cost about $100.
Operating
System Requirements:
You
will need a
32 bit FAT operating system that allows for the creation of a "real mode"
boot disk. Windows 98 Second Edition is preferable. Since some
critical portions of a forensic examination are done at a "real mode" DOS
level, Windows ME, Windows 2000, Windows NT or Windows XP cannot be used
for these critical portions of the examination.
If you are currently using Windows ME/2000/NT/XP,
you can continue to use it, but not for the beginning
of the course. If you have
acquired the image of the original drive
using Forensic Tool Kit or Encase, Windows
XP is recommended for the examination
of the image. However, normally you
will need a 32 bit FAT version of Windows
for the actual access and acquisition
of the image of the original hard drive. We
will provide assistance with the 32
bit FAT operating
systems.
If
you are not taking our course, the FSUITE forensic utilities can be purchased
separately. The pricing of our FSUITE forensic software can be found
at FSUITE utilities.
Please
contact us if you have any questions about the hardware or software requirements.