| Nowhere to hide: Forensic tool moves to Linux |
Mar. 26, 2009
 Linux'ers who thought they had erased all traces of their latest Ponzi scheme, beware: MacForensicsLab's desktop forensic tool has moved to Linux. Designed to help law enforcement, E-Discovery, and IT professionals quickly extract suspect information, version 2.1 of MacLockPick now runs on Linux, says the company.
Previously available only for Windows and Mac OS X (see screen below), MacLockPick 2.1 is now targeting the most cunning criminals of all: Linux users. (Yeah, buddy, we know what you mean when you say software should be "free.")
MacLockPick is designed to quickly locate and organize potential suspect clues without disturbing the crime scene. The application focuses primarily on cyber criminals, performing on-scene forensic triage to locate information in minutes before the cyber trail turns cold, says MacForensicsLabs.
MacLockPick setup screen (Mac version)
(Click to enlarge)
Running from a USB flash drive, the program detects system and activity details, as well as online history, quickly scanning through chat logs, phone records, browser history, passwords, accounts, system state data, or any selected file type, says the company. The minimally invasive routines leave data intact and viable for future investigation, and help to maintain the viability of evidence in court, says the company.
Designed with a plugin architecture, MacLockPick offers custom routines for programs like Skype, Firefox, and even Apple iPhone data. Version 2.1 adds new plugin support designed to extract specific Windows registry information that was previously unavailable.
Availability
MacLockPick 2.1 is said to be available now for $500, or $400 for licensed law enforcement. (That's right, no "free" software here, pal. Now step back behind the yellow tape.)
-- Eric Brown
Do you have comments on this story?
Talkback here
NOTE: Please post your comments regarding our articles using the above link. Be sure to use this article's title as the "Subject" in your posts. Before you create a new thread, please check to see if a discussion thread is already running on the article you plan to comment on. Thanks!
Related Stories:
(Click here for further information)
|
|
|
|
|
|
|
|
