Something new under the sun

摘要

As regular readers know, one of my occasional pet peeves regards the lack of innovation in our field, especially in digital forensics. In this field we tend to see more of the same tired old tools with a few new capabilities or a new point solution to specific forensic problems. But as for a sea change in the core computer or network forensics tools? Not so much. All of that ended when AccessData introduced FTK 4.0 with Cerberus and Visualization. I almost never say this about a forensic tool, but this one blew me away.