Live forensics tools

Here is a list of tools that you will use for your Live Forensics homework:

• oem3sr2.zip
• fport
• PsTools
• mdd
• win32dd

Once you have downloaded all of these tools create a folder on your machine in order to extract and keep them. For example: C:\forensic

Extract each of the zip files into this folder. If you need a zip program, you can download 7-zip for free. I actually recommend this program, since it can handle several archive/zip types. Though some of these zip files will automatically extract themselves into their own folders, some will not. So you might want to make a folder for each application prior to extracting the contents of the zip files.

More information is in the slides. More instructions soon...