Computer Disk Forensics
.
Forensic Toolkit (FTK)
FTK is an award-winning, court-cited digital investigations solution built for speed, stability and ease of use. It quickly locates evidence and forensically collects and analyzes any digital device or system producing, transmitting or storing data by using a single application from multiple devices. Known for its intuitive interface, email analysis, customizable data views, processing speeds and stability, FTK also lays the framework so your solution can grow with your organization’s needs for a smooth expansion.
Encase Forensic
EnCase Forensic is a digital forensic solution that allows to decrypt, collect, and preserve critical evidence and data from a wide variety of devices. EnCase Forensic allows users to uncover hidden, deleted, or modified evidence from multiple sources such as computers, social media platforms, cloud services, IoT/mobile devices. EnCase Forensic can Intelligently accelerate investigations by automating workflows using built-in AI/OCR and image analysis.
Detego Unified Forensics Platform
The Detego® Unified Forensics Platform is a true end-to-end investigation suite for the acquisition, analysis and reporting of any digital assets.
MCMS’ patented solutions allow you to gain access to Smartphones, Tablets, Laptops, PC’s, Servers, SATA Drives and more to rapidly extract all data in a forensically sound manner. The amalgamation of this big data into one central command center allows you to extract maximum intelligence from it and find the critical links to your case using automated workflow technology.
Magnet AXIOM
AXIOM is the complete investigation platform with the ability to recover, analyze, and report on data from mobile, computer, and cloud sources. Features like Timeline analyze data across all evidentiary sources. The examination tools help forensics professionals quickly find the most relevant data and visualize it for better analysis. AXIOM can be used to look for evidence that other tools cannot find, to verify data, and to integrate images acquired with other tools into a single case file for examination. AXIOM Process uses automation to streamline acquisition and processing tasks required to prepare evidence for examination. AXIOM Examine enables efficient analysis of large volumes of data — allowing for quick identification of the evidence that’s most important to the investigation.
Belkasoft Evidence Center X
Belkasoft X (Belkasoft Evidence Center X) is a flagship tool by Belkasoft for computer, mobile and cloud forensics. Belkasoft Evidence Center X acquires, examines, analyzes, and presents digital evidence from major sources—computers, mobile devices, RAM and cloud services—in a forensically sound manner.
While performing search tasks for evidence, Belkasoft Evidence Center X uses approaches that enable it to find the most forensically significant artifacts quickly instead of wasting time on redundant operations. Powerful analytical features such as a connection graph, a timeline and advanced picture and video analysis help you to uncover facts rapidly.
It is an irreplaceable analytical tool for digital forensic laboratories, state-level police departments and other investigation agencies.
E3:Universal
E3 Platform is designed to deal with all types of digital data from computers, email, internet data, and smartphones; everything can be captured and reviewed in a single interface with a collective review. The E3:Universal license platform combines everything that Paraben can offer in a single license to make the process of analysis and review easy, effective, and efficient.
The E3:Universal software license allows you to perform a comprehensive examination of data with capture capabilities for remote imaging, smartphone logical and physical capture, and even bootable triage imaging. The variety of options make E3:Universal ideal for any lab that needs to have diverse capabilities to deal with digital investigations.
E3:P2C
E3:P2C is a game-changing computer forensics tool for your investigating lab. A single interface can search, analyze, review, and report digital data from multiple computer related data sources. E3:P2C provides a reliable and comprehensive look at computer forensics with analysis engines that process data from a large variety of sources such as email, instant messaging, file system artifacts, etc.
PALADIN
PALADIN is a bootable forensic Linux distribution based on Ubuntu and is developed and provided as a courtesy by SUMURI. The boot process has been modified to assure that the internal or external media of computers and devices are not modified or mounted. PALADIN is available as an ISO which can be used to make a bootable DVD or USB. Once booted, the user will find a host of pre-compiled open-source forensic tools that can be used to perform various tasks.
MD5 – VFC
VFC stands for Virtual Forensic Computing. VFC is a virtualisation tool that digital investigators can use to view the contents of devices like PCs or laptops in the same way the user does. The data copy is started in a virtual environment and shows the screens in a Windows or Apple environment just as the suspect has seen them.
This product makes it possible to virtualise the environment of the suspect and further investigate it before actually copying the data.
The main advantages are:
– From forensic image to a virtual machine in seconds
– VFC restored the suspect’s computer in a virtual environment
– A virtual addition for every forensic investigator
– View the material as it looks on the original machine
– It validates the findings of other forensic solutions
