The SANS SIFT Workstation is a VMware Appliance that is preconfigured with all the necessary tools to perform a forensic examination. Includes the Autopsy Forensic Browser. The appliance is utilized in the Computer Forensic, Investigation, and Response course offered by SANS. Examine core file system data and metadata structures to increase understanding of the FAT, NTFS, UNIX, LINUX file systems. The popular appliance is now offered as a free download via this site. Free registration is required