An Evaluation of Forensic Tools in a Linux Environment

This thesis presents an in-depth assessment and comparison of several digital forensic tools with a special emphasis on two particular toolskit, namely a proprietary, and one of the currently most widespread digital forensics tools in use by law enforcement agencies across the world today, called EnCase Forensics, versus PyFlag, an open source alternative used with great success in the winning contribution to the highly acclaimed Digital Forensics Research Workshop (DFRWS) anno 2008.