Sunday, March 23, 2014

SIFT Workstation 3.0 has been released

SANS released their new, improved version of the SANS Investigate Forensic Toolkit (SIFT) workstation.

Key new features of SIFT 3.0 include:

Ubuntu LTS 12.04 Base
64 bit base system
Better memory utilization
Auto-DFIR package update and customizations
Latest forensic tools and techniques
VMware Appliance ready to tackle forensics
Cross compatibility between Linux and Windows
Option to install stand-alone via (.iso) or use via VMware Player/Workstation
Online Documentation Project at
Expanded Filesystem Support


You can also install it in your own. Download and install Ubuntu 12.04 LTS, and run the fullowing command:

wget --quiet -O - | sudo sh -s -- -i -s -y

This will install SIFT on top of the OS.

No comments: