Forensic Tools

In my Network security class we are discussing forensic tools. I'm curious as to what everyone here thinks is the best forensic tool(s) available (both freeware and commercial). Please add your comments as this is quite interesting to me.

Barry, Tim, Jim, Chas, and others, your thoughts on this?
Jack

 

Ok folks, with over 60 hits on this thread and NO-ONE has any comment as to the best forensic tools out there (either commercial or freeware). Come on now, I highly doubt that this great collection of Geeks has no opinion on this subject. Let it fire guys!

 

If youd be more specific as to what youre looking for, or what functionality out of a program youre looking for, someone might be able to give you a straight answer.

Start with Wireshark to analyze traffic.

 

Like Nirsoft tools, Winternals, GetDataBack, a linux boot disk like Trinity..

http://www.forensicswiki.org/wiki/Tools

 

KingSteve - As I stated it is for a Network security class that is supposed to prime you for the CompTIA Security+ certification. The forensic tools should have a focus on security with tools to examine your network, the connections, validity of CA's, and other similar tools. Also am interested in whatever other network tools you are using and just how they work into your productivity suite. Am always interested in looking at new products and evaluating the usefulness of said products so just about any type of forensic tools you wish to list would be helpful in some manner.

Foogoo - thanks for the links bud. I will check these out.

Anyone else?

 

What school do you go to? Your not in Chicago by any chance are you?

Coffee is used by law enforcement... good luck getting your hands on it.
http://msforums.ph/forums/p/48034/232101.aspx

 

Nope, downstate IL. Going to Heartland Community College in Normal, IL.