Does anyone have any experience with NTI's training? How does their training compare to EnCase and others?

They have a new tool they are promoting heavily and I wonder if anyone has any feedback on this as well. It is called Net Threat Analyzer and is sold to probation and parole officers.

thanks.  

Hi Jim,

Welcome to Forensic Focus!

Do you have any more information on Net Threat Analyzer (links, etc.)? What does it do? I'm intrigued by the link to parole/probation officers.

Kind regards,

Jamie
_________________
Jamie Morris
Forensic Focus
Web: www.forensicfocus.com
Twitter: twitter.com/ForensicFocus
Facebook: www.facebook.com/forensicfocus 

I saw a demonstration of the product at a recent tradeshow in St. Louis called the International Association for Identification (IAI). It appears to work by running on an initial boot and then write a list of URL's on a cd or floppy which is then reviewed seperately with special viewer software.

I just bought a copy and plan on running it this weekend.

Here is the URL that describes the product. It is NTA Stealth.

www.forensics-intl.com...tsnew.html

I'm not sure if I want to sit through their training too.

Jim  

Thanks, Jim. I've taken a look at the product description on the NTI site. I'd be *very* interested in what you think once you've had a chance to review it, especially with regard to the claim "There is no other program that does what this program does!"

Jamie
_________________
Jamie Morris
Forensic Focus
Web: www.forensicfocus.com
Twitter: twitter.com/ForensicFocus
Facebook: www.facebook.com/forensicfocus 

Hi everyone!

Hope this doesn't come too late.

I had the pleasure to enjoy the NTI training course. A good introduction into the forensics world, and lots of hand on sessions.

Most of the training is done in the DOS world, so it's nothing for mouse-addicts. Students also get a lot of helpful (DOS-) tools.

NTA will is one of the programs, that I use on a regular base. It will extract all references to Internet-sites, like e-mail addresses and URLs from a file, like a dd-image or a pagefile. Also NTA identifies certain keywords, that could be helpful in an investigation.

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program.

HTH
/Eddi
_________________
Doing IT forensics for food 

Thanks Eddi, that's interesting.

One question...

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program

Are you saying there's no way to modify this list? That would seem to be a huge drawback during an investigation, or am I missing something obvious here? (Wouldn't be the first time!)

Cheers,

Jamie
_________________
Jamie Morris
Forensic Focus
Web: www.forensicfocus.com
Twitter: twitter.com/ForensicFocus
Facebook: www.facebook.com/forensicfocus 

- jamie

IMHO the only real drawback is, that the list of (English) keywords is hardcoded into the program

Are you saying there's no way to modify this list?

Yes, that's what I'm saying. No options, no loadable wordlists.
Take it or leave it.

I for my part take it all the time.

Cheers
/Eddi
_________________
Doing IT forensics for food