Software

Description:
These programs are used in the practical part of the course.

Content:

Filedisk - A program to mount a raw duplication image as a drive under Windows. (Homepage, Archive) Note: Installation required!
DCode - A program to decode date and time fields. (Homepage, Archive)
LADS - A program to show Alternate Data Streams (ADS) of NTFS. (Homepage, Archive)
WinHex - Ein Hex-Editor. (Homepage, Archive, Manual)
HxD - Freeware Hex Editor and Disk Editor. (Homepage, Archive - Installable version, Archive - Runnable version)
Cygwin - A Linux-like environment for Windows. (Homepage, Installer)
Galleta - IE Cookie file viewer. (Homepage, Archive)
Pasco - Parser for index.dat files. (Homepage, Archive)
John the Ripper - A free password cracker. (Homepage, Archive)
Ophcrack - A Windows password cracker. (Homepage, Installer)
Note: The rainbow tables are on the DVD of the instructor or must be downloaded (XP free small 380MB, XP free fast 703MB, Vista free 461MB)!
Nessus - A network vulnerability scanner. (Homepage)
NMap - A network mapper. (Homepage, Installer)

Acrobat Reader is required for viewing the slides (available online).