Computer forensics (also known as digital forensic) tools are essential part of any computer forensics investigation. A variety of computer forensics tools are available that can be used by forensics investigators. The tools can be classified in many different ways including, open source vs. proprietary; hardware vs. software; special purpose vs. general purpose, etc. In general, software tools are more common among the investigators. Each software tool has its own pros and cons. However, they all have one feature in common, i.e. installation, configuration, and setup. This means that a tool must be installed and configured before it can be used. For some tools, the configuration process can be complicated and time consuming. To avoid this, the computer forensics specialists have the option of using the digital forensics tools that are pre installed and configured in Backtrack 5.0. In this research, we explore various digital forensics tools that includes in Backtrack 5.0 r3. We review the tools that are available in each category, explain how each tool can be used, discuss their capabilities, and present the result of our experiment on at least one tool from each category.

Keywords