ABSTRACT

This section covers the specific use of the NTI Forensic Utilities. NTI (New Technologies, Inc.) is located in Gresham, OR. In my opinion, they offer the most comprehensive set of tools for collecting, preserving, and analyzing computer evidence available today. Current tool sets are focused on MS-DOS and Microsoft Windows 3.X, 95, and 98 file systems. They have some usefulness on NetWare, NT, and Unix environments as well. However, at this writing, NTI is working on tool sets for Microsoft Windows NT and Novell NetWare.