FTK Forensic Toolkit
5.0 out of 5 stars
(1 Rating)
Zero in on relevant evidence quickly, conduct faster searches and dramatically increase analysis speed with FTK®, the purpose-built solution that interoperates with mobile device and e-discovery technology. Powerful and proven, FTK processes and indexes data upfront, eliminating wasted time waiting for searches to execute. No matter how many different data sources you’re dealing with or the amount of data you have to cull through, FTK gets you there quicker and better than anything else. FTK uses distributed processing and is the only forensics solution to fully leverage multi-thread/multi-core computers. While other forensics tools waste the potential of modern hardware solutions, FTK uses 100 percent of its hardware resources, helping investigators find relevant evidence faster. Since indexing is done up front, filtering and searching are completed more efficiently than with any other solution.
Learn more about FTK Forensic Toolkit
Softaken Examiner
5.0 out of 5 stars
(2 Ratings)
Softaken Examiner Tool is a digital investigation application designed to support email forensic examination and electronic evidence analysis. It helps forensic experts, legal professionals, and corporate investigators examine email data and organise information. It supports several email formats like PST, OST, EML, MSG, MBOX and other archives and photos. Users look at email messages, headers, attachments, metadata, and MIME structures. Its extensive search tools let users find what is needed based on keywords, who sent it, dates, IP addresses, URLs, and other parameters.
Softaken Email Forensics Analysis Tool also provides features like timeline analysis, communication mapping and sender-receiver data to help investigators analyse email activities and communication patterns. It also has SHA-256 hash verification, activity logs, bookmarks, tags, and investigation records. The software offers case reporting and enables users to export selected findings to CSV, JSON, HTML and PDF.
Learn more about Softaken Examiner
XRY
XRY by MSAB is a mobile-device forensics extraction solution that enables investigators to securely and efficiently access, extract, and preserve digital evidence from smartphones, tablets, and other mobile devices. It supports a wide and growing range of devices, unlock and bypass features (including passcode bypass and chip-level support for difficult devices), full decoding of app data (such as WhatsApp, Facebook, Instagram, Viber), browser history (Safari, Chrome, Opera), and location/timeline correlation across sources. It is built with full chain-of-custody and evidential integrity in mind, including a secure XRY forensic file format with encryption and auditing, while offering access both at the frontline (scene) and in the lab. XRY includes variants such as Logical (fast, live data), Physical (raw memory dumps, deleted data recovery), Cloud (cloud-/app-based data), and Pro (deepest device and exploit access).
Learn more about XRY
Sherlock Forensics iPhone and iPad Analyzer
Sherlock Forensics iPhone and iPad Analyzer is Windows software for acquiring and examining iPhone and iPad evidence through logical MobileBackup2 backups. It also analyzes Cellebrite UFED and Inseyets full-filesystem extractions created with separate acquisition tools. The application runs fully offline and does not modify evidence. It decrypts encrypted backups and organizes data into more than 200 searchable artifact views for messages, calls, contacts, Safari history, Apple Notes, Maps and other app data. The free edition previews 25% of each artifact view, capped at 100 rows. The Forensic Edition adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, a raw SQLite browser, file extraction and screen capture. It can flag deleted records recovered from the examined data. Users include digital forensic examiners, investigators, law enforcement, legal teams and forensic labs that review and document mobile-device evidence.
Learn more about Sherlock Forensics iPhone and iPad Analyzer