I was thinking about giving The Sleuth Kit a try, but wanted to get some opinions over people that have used it.
Would be nice to use encase but that stuff is just crazy expensive.
Someone was using a temp location to store quicken data files.. Go figure, then she clears the temp folder. Would you guys use Sleuth Kit or is there a quicker easier opensource/free software out there to do this?
Thanks!