About legality of u...
 
Notifications
Clear all

About legality of usage of unlicensed forensics tool

27 Posts
12 Users
0 Likes
14.5 K Views
(@cs2018)
Posts: 1
New Member
Topic starter
 

You know forensics tools are very expensive. I am new in this field and I can not afford to buy them at the moment. However there are some forensics tools around whose dongles are emulated or which are cracked.

I know it is illegal to emulate dongles or crack but my question is a bit different.

As I am newcomer to forensics field I wonder if the courts interrogate used programmes for reports are licensed or not.
Must I refrain to use such programmes or not?

Regards

 
Posted : 25/11/2018 6:07 pm
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

It is not nessesary to use commercial tool in DFIR. You can use freeware tools or do something manually.

Digital Forensics with Open Source Tools
https://www.amazon.com/Digital-Forensics-Open-Source-Tools/dp/1597495867

Top 20 Free Digital Forensic Investigation Tools for SysAdmins
https://techtalk.gfi.com/top-20-free-digital-forensic-investigation-tools-for-sysadmins/

 
Posted : 25/11/2018 6:23 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

As I am newcomer to forensics field I wonder if the courts interrogate used programmes for reports are licensed or not.

I would put it differently, independently from whether the Court will be interested in the legalities of your agreement (or non-agreement) with the maker of the software[1], basically you will be making in Court a sworn statement that you used Tool "A" in your professional activity.

And this will be recorded in the acts of the Court (which tend to be very persistent and usually publicly accessible documents).

Now, two possibilities (up to you to evaluate the risks and consequences connected with them and the probability either may happen)
1) the software maker gets to know about that and sues you, having available what equates to a plain confession of the infringement
2) the solicitor of the other party (in the same or other trial) gets to know about that and manages to use this piece of info to invalidate your report and/or expert witness statement

jaclaz

[1] it won't

 
Posted : 25/11/2018 7:16 pm
nightworker
(@nightworker)
Posts: 134
Estimable Member
 

We dont have forensic universal standart yet
only one thing is standart that hash and integrity so that
if you can verify your evidence you can use whatever tool you want

 
Posted : 26/11/2018 6:43 am
(@randomaccess)
Posts: 385
Reputable Member
 

You can get a lot done with adequate training (whether its paid or self taught by reading various books and research) and freely available and open source tools

If it were to come out that you are using pirated software to conduct your examinations your ethics may get called into question, and for no reason when there are freely available tools to use

 
Posted : 26/11/2018 7:19 am
azrael
(@azrael)
Posts: 656
Honorable Member
 

Legality of licensing issues aside …

You could use this as an opportunity to make you a better forensic analyst …

Use your cracked version of software to do "triage" then verify all of the evidence that you have found using a tool such as WinHex (which is free) - you'll have to learn how to find and interpret things yourself within the image, but when you write your report (a) your tool will be beyond reproach and (b) you'll actually understand how you got the results, rather than being a "button monkey" …

Yes, it's more work - but that, generally is the way of life - things that you don't pay for tend to be harder … The skills learnt will stand you in good stead though !

EDIT You could, of course, extrapolate this to "Trial" versions of tools too …

 
Posted : 26/11/2018 7:24 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

…l such as WinHex (which is free) .

Free since when? 😯

Last time I checked it it was Commercial
https://www.x-ways.net/winhex/comparison.html

Relatively cheap when compared to many other "forensic tools", still
http//www.x-ways.net/order.html

jaclaz

 
Posted : 26/11/2018 9:24 am
azrael
(@azrael)
Posts: 656
Honorable Member
 

Free since when? 😯

Sorry, good point well made - there is an unlimited and fully featured "evaluation" … But you are absolutely right, not free beyond the evaluation.

( I have a full Forensic License and I think it's the best thing since sliced bread … )

 
Posted : 26/11/2018 9:32 am
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
 

You know forensics tools are very expensive. I am new in this field and I can not afford to buy them at the moment. However there are some forensics tools around whose dongles are emulated or which are cracked.

2 things one is playing around with hacked versions of commercial tools and the 2nd one is the usage for a court process.
The first case is okay, since you only play around and do not make any money, but experience from it. Using an illegally acquired software to make any money with it is clear "no - go" for me. And I would never ever risk the usage of such a software in front of a judge or the lawyers there….

 
Posted : 26/11/2018 10:07 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

The first case is okay, since you only play around and do not make any money, but experience from it.

Or in other words, using pirated/cracked software for acquiring the experience and competence that will later allow you to make money is OK, it is only when you use it to directly make money that it is not OK. ?

Isn't it like saying that it is OK to drive a stolen race car as long as you do that it for training/practicing, but that you shouldn't actually enter an official competition with it? roll

jaclaz

 
Posted : 26/11/2018 10:34 am
Page 1 / 3
Share: