Software for forensic analysis

Question

I am looking for software, which helps with forensic analysis of .exe-files, especially, if the analysied file

• modifies the registry
• creates, modifies or deletes other files
• opens network connections
• starts threads or processes

Since i am just doing this as a hobby, i am not willing to spend money on the software. So far i only know PEstudio, which is not bad, but has not that many functions. I am thankful for any recommendations.

Answer 1

I would use CAINE (Computer Aided Investigative Environment)

CAINE offers a complete forensic environment that is organized to integrate existing software tools as software modules and to provide a friendly graphical interface.

You can install it on a USB stick or on a Virtual Machine.