Forensic Tools in Comparison: An Assessment of Performance Across Different Parameters

Authors : Annalaxmi Valluvar; Spoorti Shetty; Subhashree Pandian; Suvarna Chaure

Volume/Issue : Volume 8 - 2023, Issue 9 - September

Google Scholar :

Scribd :


Computer forensics is a crucial field that involves the collection, preservation, and analysis of digital evidence. Forensic tools play a vital role in this process, aiding investigators in extracting, analyzing, and interpreting data from diverse digital devices. With the increasing complexity of digital devices and the surge in digital data, selecting the appropriate forensic tool has become paramount. This study evaluates and contrasts different free forensic tools with an emphasis on network examination, data analysis, and password cracking. The evaluation considers variables such platform support, file system support, imaging capabilities, data-driven features, reporting capabilities, hash type support, attack types, resource utilization, and pattern matching capabilities. The results of this comparison research are an informative resource for forensic professionals seeking to choose the best tool for their specific requirements. Notably, the data analysis capabilities of Autopsy, FTK Imager, and ProDiscover Basic displayed unique strengths and limitations for data analysis. Due to its robust hash type support and effective administration of resources, John the Ripper and Hashcat emerged as reasonable options for password cracking. The study also recommends Wireshark for network analysis because of its intuitive user interface, substantial packet analysis tools, and flexible multi-platform compatibility with other protocols. Nevertheless, is acknowledged that the ultimate choice on a forensic tool should be tailored to the distinct requirements and constraints of each investigatory project.

Keywords : Computer Forensics, Digital Evidence, Forensic Tools, Network Analysis, Data Analysis, Password Cracking, Platform Support, File System Support, Imaging Capabilities, Reporting Capabilities, Hash Type Support.


Paper Submission Last Date
31 - December - 2023

Paper Review Notification
In 1-2 Days

Paper Publishing
In 2-3 Days

Video Explanation for Published paper

Never miss an update from Papermashup

Get notified about the latest tutorials and downloads.

Subscribe by Email

Get alerts directly into your inbox after each post and stay updated.

Subscribe by RSS

Add our RSS to your feedreader to get regular updates from us.