Create your own PC forensics toolkit with AChoir

Need to know what someone’s been doing on a PC? Running some of NirSoft's forensic freeware on a USB key could help you collect enough data to figure it out. LastActivityView lists recent computer actions, OpenSaveFilesView reports on recently opened and saved files, ExecutedProgramsListdetails the programs they’ve launched, WifiHistoryView shows recent network connections, and the list goes on. The problem? Each of these tools covers one area only. To collect a full set of data you must manually launch each one in turn, set it up, then save and combine your reports -- not exactly convenient. AChoir is an open-source scriptable… [Continue Reading]