Main Page > Documentation
The BitCurator environment is built around Ubuntu 12.04LTS, and has been customized with digital forensics applications and tools. If you're interested in configuring an existing environment to use the tools and custom software included with BitCurator, we've included these instructions as well.
It is possible to run the BitCurator environment as a stand-alone operating system or as a virtual machine using virtualization software such as VirtualBox or VMWare. The instructions on this page will assist you in installing, configuring, and using the BitCurator environment (and individual tools) for both cases.
- Running BitCurator as a Virtual Machine:
- Installing BitCurator tools on an existing Linux OS (Ubuntu 12.04 LTS only)
- Using Nautilus for File and Data Analysis
- Creating a Disk Image Using Guymager
- Using Bulk Extractor Viewer to Find Potentially Sensistive Information on a Disk Image
- The BitCurator Reporting Tool
Understanding the Digital Forensics Tools in the BitCurator Environment
- fiwalk and DFXML: Descriptions and examples of the Digital Forensics XML tags produced by fiwalk
- Bulk Extractor Scanners: What the various Bulk Extractor scanners look for, why each might be useful, and what file they export to
You can also visit our YouTube channel to view these screencasts.
The BitCurator environment runs best on a host with a 64-bit processor and a native 64-bit OS. We recommend that you configure your virtualization software to provide the VM with at least 2 processor cores and 4GB of memory. For large disk images, data-intensive tasks, and simplified access to a range of hardware write-blockers, the environment should be installed on the host machine as a dedicated operating system.