±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 35883
New Yesterday: 3 Visitors: 135

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

X-Ways and NetAnalysis and IEF

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

roncufley
Senior Member
 

X-Ways and NetAnalysis and IEF

Post Posted: Mar 02, 18 12:01

I use X-Ways Forensic as my main analysis tool but am considering if I should buy NetAnalysis by Craig Wilson and/or Internet Evidence Finder in addition. Any views as to overlap or unique functions would be welcome.

Ron Cufley
_________________
Forensic Computer Services
Digital Forensics and eDiscovery
Lotus Notes eDiscovery and Forensics
CCTV Forensics and analysis
Tape eDiscovery and Forensics 
 
  

minime2k9
Senior Member
 

Re: X-Ways and NetAnalysis and IEF

Post Posted: Mar 03, 18 10:35

Yeah I'd stay away from Netanalysis, it was good in previous times (probably over 5 years ago) but it hasn;t kept up with the pace of change in too many areas.
IEF/Axiom is a good choice and easily preferable to Netanalysis  
 
  

Chris55728
Senior Member
 

Re: X-Ways and NetAnalysis and IEF

Post Posted: Mar 05, 18 08:42

Hi Ron,

Given the choice between NetAnalysis and IEF I'd go for the latter.

As minime2k9 said, NetAnalysis was good a few years back but IEF has come on leaps and bounds since it was first released and has overtaken NetAnalysis in all areas.

However, with the release if AXIOM, which does imaging, data recovery (the IEF 'bit'), data analysis and reporting, I get the impression that Magnet will soon be releasing fewer and fewer updates to IEF, to the point where it's phased out, which will force people down the AXIOM route.

The thing is, some people just want the functionality of IEF, not all the bells and whistles that AXIOM provides. I wish they'd market AXIOM as the 'new' IEF and which you could purchase and then have the imaging, data analysis and reporting aspects as separate 'modules' that you could purchase individually if you needed them. Not everyone wants or needs everything that AXIOM provides yet they have to pay for it regardless.

Please don't think this is me Magnet-bashing. I've been using IEF for years now (from when it was published by JAD Software) and whenever I've logged calls with them they've been on the ball and prompt in their responses, they release updates on an almost monthly basis and the software does what it says on the tin. I still think they're going to phase out IEF and their documentation sometimes lags behind the artefacts that IEF recovers but overall I rate IEF.

Cheers.  
 
  

mcman
Senior Member
 

Re: X-Ways and NetAnalysis and IEF

Post Posted: Mar 05, 18 15:17

- Chris55728

However, with the release if AXIOM, which does imaging, data recovery (the IEF 'bit'), data analysis and reporting, I get the impression that Magnet will soon be releasing fewer and fewer updates to IEF, to the point where it's phased out, which will force people down the AXIOM route.


We have no plans to discontinue IEF anytime soon and we still do monthly updates to both IEF and AXIOM. You may see more analysis tools and unique features go into AXIOM but from an artifact standpoint, we update them both on an equal pace.

Honestly, we built AXIOM because there were a lot of people who wanted features (acquisitions, file system/registry views, artifact indexing, connections, etc.) that the codebase for IEF couldn't handle but if you're looking for none of the bells and whistles, just the artifacts, IEF isn't going anywhere.

Jamie McQuaid
Magnet Forensics  
 
  

Randy_Randerson
Member
 

Re: X-Ways and NetAnalysis and IEF

Post Posted: Mar 05, 18 20:29

- Chris55728


Bunch of words.


Chris, I totally get what you're saying and as someone not even remotely close to being affiliated with Magnet I don't think you're looking at it from the perspective of a company or business in general.

When we moved from IEF to Axiom, we did so because it had all the functions we wanted to streamline imaging and processing over the weekend so my people didn't have to remote in on days off to keep a case moving. I am also of the mentality that it is very bad for business to nickel and dime out your modules to your customers by having them go through a catalog of what they want and then charging based on that. If I don't wanna use the imaging feature, I don't use it. But there may be times that I will want to. This is something I've seen companies like AccessData and even Guidance do this with their software. Guess what isn't used in my lab anymore?  
 
  

Adam10541
Senior Member
 

Re: X-Ways and NetAnalysis and IEF

Post Posted: Mar 06, 18 07:47

- calimelo
If you need to examine browser artifacts, messaging applications Magnet Axiom is good but slow. I didn't use netanalysis, but their file carver (Blade) is handy. I'd also try Forensafe Analyser for the same issue, really fast, much cheaper but does not have as many artifact types as Axiom. There is also Belkasoft Evidence Center.


You mention Forensafe, which looks interesting but it doesn't appear it's available yet? Or if it is there is no links etc on their webpage to suggest pricing or download demo's etc..  
 
  

Chris55728
Senior Member
 

Re: X-Ways and NetAnalysis and IEF

Post Posted: Mar 06, 18 08:09

- mcman
- Chris55728

However, with the release if AXIOM, which does imaging, data recovery (the IEF 'bit'), data analysis and reporting, I get the impression that Magnet will soon be releasing fewer and fewer updates to IEF, to the point where it's phased out, which will force people down the AXIOM route.


We have no plans to discontinue IEF anytime soon and we still do monthly updates to both IEF and AXIOM. You may see more analysis tools and unique features go into AXIOM but from an artifact standpoint, we update them both on an equal pace.

Honestly, we built AXIOM because there were a lot of people who wanted features (acquisitions, file system/registry views, artifact indexing, connections, etc.) that the codebase for IEF couldn't handle but if you're looking for none of the bells and whistles, just the artifacts, IEF isn't going anywhere.

Jamie McQuaid
Magnet Forensics


Hi Jamie,

I hope you weren't offended by my comments, I think I probably had my cynical hat on when I wrote the reply which probably wasn't the best of ideas! Thank you for putting my fears to rest.

Cheers.  
 

Page 1 of 2
Page 1, 2  Next