Perbedaan AUDIT AROUND THE COMPUTER dengan AUDIT THROUGH THE COMPUTER & TOOLS untuk IT FORENSIK dan AUDIT

PPerbedaan Audit Around The Computer dengan Audit Through The Computer

PPererbedaan nya dapat dilihat dari lembar kerja audit IT:

Tools YANG DIGUNAKAN 

Tools yang digunakan untuk IT Audit dan Forensik :

1. Hardware
   • Harddisk IDE dan SCSI kapasitas sangat besar, CD-R, DVR drives
   • Memori yang besar (1 – 2 GB RAM)
   • Hub, Switch, keperluan LAN
   • Legacy hardware (8088s, Amiga)
   • Laptop Forensic Workstations
2. Software
• Viewers (QVP http://www.avantstar.com/, http://www.thumbsplus.de/ )
• Erase/Unerase tools : Diskscrub/Norton utilities
• Hash utility (MD5, SHA1)
• Text search utilities (dtsearch http://www.dtsearch.com/ )
• Drive imaging utilities (Ghost, Snapback, Safeback)
• Forensic toolkits
  • Unix/Linux : TCT The Coroners Toolkit / ForensiX
  • Windows : Forensic Toolkit
• Disk editors (Winhex)
• Forensic aquisition tools (DriveSpy, EnCase, Safeback, SnapCopy)
• Write-blocking tools (FastBloc http://www.guidancesoftware.com/ ) untuk memproteksi bukti-bukti
• Forensic software tools for Windows (dd for Windows, Encase 4, FTK, MD5, ISOBuster)
• Image and Document Readers (ACDSee, DecExt)
• Data Recovery/Investigation (Active Partition Recovery, Decode – Forensic Date/Time Decoder)
• Dll.

Sumber:

http://heruhartanto.blogspot.com/2013/05/audit-around-computer-dan-through.html

http://arizkaseptiani.wordpress.com/2011/03/20/audit-it-forensik/