SIFT Workstation - Digital Forensics and Incident Response Distribution


SIFT is a computer forensics distribution that installs all necessary tools on Ubuntu to perform a detailed digital forensic and incident response examination. It is compatible with expert witness format, advanced forensic format, raw, and memory analysis evidence formats.

Use

The toolkit has the ability to securely examine raw disks, multiple file systems, and evidence formats. It places strict guidelines on how evidence is examined, verifying that the evidence has not changed.

File system support

1)Ubuntu LTS 16.04 Base
2)64-bit base system
3)Auto-DFIR package update and customization.
4)VMware appliance ready to tackle forensics.
5)Cross-Compatibility between Windows and Linux.
6) Choice to install stand-alone via or use VMware player/Workstation.
7) Online documentation project at "http://sift.readthedocs.org".