What Our Customers Are Saying
This free Mac application was originally developed by Brian Carrier. The software is included in Security Tools. NetworkMiner is another free digital forensic software. It is actually a network analyzer forensic tool, which is designed to capture IP Address, MAC Address, Host Name, Sent Packets, Received Packets, Sent Bytes, Received Bytes, No. Jul 08, 2010 Open Source Independent Review and Interpretation System is public-domain, free and open source software designed for clinical, forensic, and research use, and has been validated for use as an expert system for single-source samples.
In 34th episode of the Digital Forensic Survival Podcast Michael Leclair talks about his favourite tools for OS X forensics. He presents a wide list of forensic tools, which can be used for solving common problems, such as imaging, file analysis, data carving, decryption, email analysis, etc.
SysTools XLSX Viewer software Verified Purchase Reviews
Due to virus attack, my Excel files got damaged severely. Those files had some important data and I was in immediate need to view those data. Using XLSX Viewer sofware all my problems got resolved permanently. The XLSX file opener software opened and viewed the Excel file contents. It also supports reading bulk XLSX files with multiple worksheets. All in all, a highly recommended application.
There was an incident of power failure which made some of my XLSX files become completely corrupt and inaccessible by Excel. Then I started to look out for a reliable program that will allow me to view the data of those files. Thanks to XLSX Viewer Tool, I was able to view the complete contents of my Excel files without facing any more difficulty. I would rate this application 9 out of 10.”
Multiple XLSX reader tool applications claimed that they can display the complete XLSX file contents, but none of them were successful in my case. Then I found out about XLSX Viewer which is a free XLSX file opener software. With the help of this particular utility, I was able to read and explore all my Excel files with all their charts and functions. I appreciate the efforts of the developers and thank them.
In 34th episode of the Digital Forensic Survival Podcast Michael Leclair talks about his favourite tools for OS X forensics. He presents a wide list of forensic tools, which can be used for solving common problems, such as imaging, file analysis, data carving, decryption, email analysis, etc. Autopsy Forensic Browser 4.11.0 for Mac is free to download from our software library. This free Mac application was originally developed by Brian Carrier. The software is included in Security Tools. NetworkMiner is another free digital forensic software. It is actually a network analyzer forensic tool, which is designed to capture IP Address, MAC Address, Host Name, Sent Packets, Received Packets, Sent Bytes, Received Bytes, No. Of Open TCP Ports, Operating System, etc.The good part of the software is that it captures all the data without putting any traffic on the network.
Kivu’s digital forensic professionals are seeing an ever-increasing number of Apple devices being used within organizations. Our forensic professionals have extensive Apple experience and have provided expert testimony on a number of legal cases involving Apple devices.
The Challenges of Collecting Data
Mac computers are known for having a secure delete function built into the system. This allows a user to overwrite the computer’s free space 1 time, 7 times or 35 times, making it impossible for forensic examiners to recover deleted data.
Mac computers also come with a built in encryption feature called “File Vault.” If the user enables File Vault, examiners cannot image or access the contents of the computer until the encryption is bypassed, either with the user’s password or by extensive workarounds involving memory analysis to extract possible passwords. Some vendors claim to decrypt File Vault passwords, but the cost of this method is very high and may not provide the needed results.
iOS devices, such as iPhones and iPads, also present imaging challenges. Physical images are bit for bit copies of a device, which includes deleted data. Physical acquisition of certain iPhone models is not possible, due to Apple’s encryption. To bypass the encryption, an examiner would need to “jailbreak the device.” This is a risky approach, since jail breaking a device could lead to destroying current evidence and making the device unusable and inaccessible.
If physical acquisition of a certain iOS model is not possible and jail breaking is not feasible, a logical acquisition may suffice. The primary issue with logical data acquisition is that certain data cannot be extracted for analysis, including: deleted data, emails, cache files, and geo-locations. This, of course, causes a major issue for forensic examiners.
Apple Forensic Tools
The digital forensic professionals at Kivu Consulting are experts in forensically imaging and preserving Apple device data. Our forensic analysts are trained and certified in the industry leading tools used to image and analyze Apple devices, such as MacQuisition, Encase, Cellebrite, FTK Imager and Black Light.
For Mac computers, MacQuisition allows for live data acquisitions, targeted data collections, and forensic imaging. This tool can acquire over 185 different Macintosh computer models and provides a built in write-blocker to maintain data preservation.
Kivu uses tools such as Encase, FTK Imager and Black Light to analyze Macintosh forensic images, as well as image and analyze iOS mobile devices. Our forensic experts hold the Encase Certified Examiner and Certified Black Light Examiner certifications, offered by Encase and Black Bag Technologies.
Selected Kivu Engagements and Expert Testimony
- Kivu Consulting has worked on and testified in various nationwide cases involving Macintosh computers and iOS mobile devices:
A construction company was investigating a sexual harassment claim. The client was using an iPhone and iPad. These devices were collected, imaged, and analyzed for evidence of communication between the user making the claim and the client, as well as any inappropriate photos that may have been taken using the devices. - Kivu assisted multiple law firms with cases involving theft of Intellectual Property. These law firms reached out to Kivu to assist with iPhone acquisition and forensic analysis to determine device activity, such as applications used, browsing, text messages and calls within a specific timeframe.
- Kivu investigated and analyzed multiple MacBook Pro devices for an accounting firm, to determine if unauthorized users gained access to the devices and exfiltrated data.
- Kivu has testified in a federal class action suit involving Apple. Multiple people claimed that Apple billed them twice for the same iTunes songs. They said that the songs they originally downloaded were not accessible in iTunes, so they downloaded the songs again and were billed a second time. Kivu conducted forensic analysis on all Apple devices provided in the case to determine if multiple instances of the same songs were present on the computers and if the originally downloaded songs were, in fact, inaccessible to the users.
- Kivu investigated multiple Mac devices for educational institutions to determine if students hacked the schools’ computer systems to acquire better grades.
About Kivu
Editing Softwares For Mac Free
Free Forensic Software For Mac Desktop
Kivu Consulting combines technical and legal expertise to deliver investigative, discovery and forensic solutions worldwide. Author, Thomas Langer, EnCE, CEH, is an Associate Director in Kivu’s Washington DC office. For more information about malware trends and what your company can do to better protect its environment and data, please contact Kivu.