Helix Tool Introduction Laboratories

Abstract

The public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Computer forensics has become its own area of scientific expertise, with accompanying coursework and certification. For someone who would like to get started practicing computer forensics it might be a little overwhelming. There are many different tools, and techniques. Each tool will provide different capabilities and will affect the suspect system differently. Some tools can be very expensive, but there are many tools available which are free and fairly ABSTRACTComputer forensics has become its own area of scientific expertise, with accompanying coursework and certification.For someone who would like to get started practicing computer forensics it might be a little overwhelming. There are many different tools, and techniques. Each tool will provide different capabilities and will affect the suspect system differently. Some tools can be very expensive, but there are many tools available which are free and fairly complete. The Helix tool is very robust and free of charge. Helix can be run as an operating system, it can be run from command line and it also has a windows GUI. Helix allows for the analysis of a live system. Many corporate systems use Windows and the Windows GUI is a perfect way to get started in practicing forensics. In this document you will find simple laboratories to follow so that you may familiarize yourself with the Helix tool using the Windows GUI and get started in the practice of computer forensics These laboratories were run on an XP-virtual machine. Helix is available as a free downloadable ISO image from