Autopsy Digital Forensics vs. NetworkMiner

Autopsy Digital Forensics is great for image investigation, just do a copy of the image, load it up and do the investigation. In the hands of DFIR specialist this software can do wonders in revealing various of pieces of information from an image. Software is easy to use and even a novice could use it without much trouble (assuming he has the knowledge of what to search for).

The NetworkMiner software in my view is a software recommended for small and/or large companies, it may be less useful in small companies or offices, but it can also be used for simple analysis. In medium and large scenarios, it is very useful in analyzing network traffic and identifying possible security flaws, password exposures and weaknesses in the security of solutions and/or technologies used in the internal network.

Incentivized

• Easy to use UI
• Fast compared to competitors
• Ability to use modules and plugins
• Portable
• Just does the job

• Credential capture exclusive tab
• Graphical interface for data analysis
• Exclusive intuitive host connection listing tab

Incentivized

• None - this software is amazing.

• MAC listing of hosts in listed connections
• Possibility to start capture focusing on only a specific host

Incentivized

Autopsy was easier to use, I liked the UI more and it just felt better.

• Easies forensic investigations
• Has great training platform
• Has a free version

• Increase in the possibility of identifying security flaws in trafficked data
• Monitor network traffic easily with no financial investment

Incentivized