IsoBuster – Computer Forensics Investigations

IsoBuster is a well known and often used tool in the forensics world. Many police departments and other governmental institutions in law enforcement and forensic data gathering use IsoBuster extensively. IsoBuster is unique because it shows the true layout of an optical disc or other media. Investigators can now fully inspect all the tracks, sessions and partitions on various media and in the mean time get a better understanding of how data is managed on the media. Furthermore do the investigators get a unique insight of the different file-systems and how these file-systems can be placed next to each other on one disc, each pointing to (possibly different) data.

IACP Conference