A forensic imaging tool to create bit level forensic image files in DD or .E01 format. Simple to use it accurately captures all drive data with fully hash integrity. Supports physical and volume acquisitions including remote networked drives.
A command line data processing engine used for computer forensics and electronic discovery.
Expandable from single instance to an enterprise level virtual environment spawning multiple simultaneous processing instances.
A powerful and intuitive tool to analyze computer evidence. Recover, analyze and report data from physical disks or forensic image files. Discover user activity with simple search, filter and analysis options. Effective for new or experienced forensic investigators.