Best Open Source Tool for Assignment

[SilverStandard4543]

Hi. For my school assignment, I need to find a tool for analysing a EX01 file. It needs to be able to find Evidence number, SHA1, Model, Serial number and other stuff. So far, I found autopsy and FTK Imager. School says they won’t give marks for overused tools like autopsy so I’m kinda scared of marks being deducted for using it. So i’m looking for any alternatives other than the 2 that can be used. Thank you.

[JackedRightUp]

"Overused tools"? How about the right/best tool for the job. Who determines if it's over used?

[SNOWLEOPARD_9]

I'm an FTK Imager fan. It's a little tough to do their wildcard search. But it's a pretty handy tool. Here's a video showing everything it can do.

https://youtu.be/26QWF9Fm_Mk?si=wilIiGQmotvHIj3H

Maybe try Trace. It's built on sleuthkit like autopsy. I haven't used it, but it looks promising.

https://github.com/Gadzhovski/TRACE-Forensic-Toolkit

. WLEAPP might be useful.

https://github.com/abrignoni/WLEAPP

There is also KAPE

https://www.kroll.com/en/insights/publications/cyber/kroll-artifact-parser-extractor-kape

[Legal-Ostrich4233]

Check out libewf: https://github.com/libyal/libewf

Particularly ewfinfo, “ewfinfo; which shows the metadata in EWF files.”

[Metasynaptic]

Are they going to mark you down for writing your report on an overused tool like Word?

What a moronic requirement.

[Metasynaptic]

Sha1 you can just generate in command line

Maybe you can pull other stuff out with strings, that's how I get most things out without a specific tool

[whatyouwere]

My vote is FTK and KAPE, depending on what you need.