Efs Forensic

FCCU GNU/Linux Forensic Bootable CD is a bootable CD based on KNOPPIX that contains a lot of tools suitable for computer forensic investigatins, including bash scripts. FCCU GNU/Linux Forensic Boot CDs main purpose is to create images of devices prior to analysis, and it is used by the Belgian... Platforms: *nix

EFS Recovery will help you to decrypt and restore EFS protected data from safe or corrupted hard disks, Dynamic Disks of any type and configurations, flash media, SSD drives and RAID arrays, regardless of the original RAID controller being installed. Moreover, EFS Recovery will fix damaged array... Platforms: Windows, Windows 8, Windows 7, Windows Server

Belkasoft Forensic IM Analyzer is the most popular, patent-pending forensic product by Belkasoft. The product facilitates searching and analyzing numerous Instant Messenger histories. This solution, chosen by FBI and other government organizations, greatly increases efficiency of collecting... Platforms: Windows

Belkasoft Forensic IM Analyzer is the most popular, patent-pending forensic product by Belkasoft. The product facilitates searching and analyzing numerous Instant Messenger histories. This solution, chosen by FBI and other government organizations, greatly increases efficiency of collecting... Platforms: Windows

Belkasoft Forensic IM Analyzer is the most popular, patent-pending forensic product by Belkasoft. The product facilitates searching and analyzing numerous Instant Messenger histories. This solution, chosen by FBI and other government organizations, greatly increases efficiency of collecting... Platforms: Windows

Belkasoft Forensic IM Analyzer is the most popular, patent-pending forensic product by Belkasoft. The product facilitates searching and analyzing numerous Instant Messenger histories. This solution, chosen by FBI and other government organizations, greatly increases efficiency of collecting... Platforms: Windows

Decrypt files protected with the Encrypting File System (EFS). Advanced EFS Data Recovery decrypts files protected with EFS in Windows 2000, XP, Server 2003/2008, Vista and Windows 7. The recovery is possible even when you transfer a protected disk into a different PC, reformat system partition,... Platforms: Windows

Pocket PC forensic mobile investigator program displays Pocket PC cell phone manufacturer name and mobile model number and detect signal quality and battery status of mobile phone. Pocket PC forensic utility analyzes windows based cell phone information such as operating system registry records,... Platforms: Windows

Mobius Forensic Toolkit is an open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files, for easy integration with other tools. Platforms: *nix

Mobile phone forensic application examines general information of all Windows based Pocket PC and PDA mobile device. Pocket PC investigation tool shows IMEI, IMSI number and manufacturer name of any PDA mobile phone. Utility shows all read/unread text messages and phonebook details of Windows... Platforms: Windows, Windows 8, Windows 7, Other

Tool for e-crime/forensic professionals that eases their work on analysing Internet Messengers histories. No password required. Supports various IMs: ICQ versions 99a up to ICQ5, MSN Messenger, Yahoo! Messenger, &RQ, Miranda. Supports deep ICQ analysis using different methods (with and... Platforms: Windows

Create bit-by-bit forensic images of hard drives, floppy disks, CDs, and other electronic media for forensic analysis, backup, drive imaging, or archiving. Acquire, compress, segment, and restore your imaged media in lightening speed. Creates bit-stream images of removable media, partitions, or... Platforms: Windows

Designed for computer forensic examiners to help organize and speed up the examination of the contents of a hard drive, Forensic Sorter allows you to sort the contents of entire hard drives into categories such as video, audio, spreadsheets, etc. so you can easily find what you're looking... Platforms: Windows

EFS Key retrieves EFS-encrypted files from NTFS partitions. To retrieve the files, the encryption password must be known or SAM database must be present. Windows XP and 2000 systems are supported. Has online help, full install-uninstall support. Download and try a free demo version. Platforms: Windows

EFS is a free email routing utility that pulls mail from a single mail account at your ISP and distributes the messages to users mailboxes on a local mail server (such as Microsoft Exchange) Unlimited users, account aliasing, brief and detailed transaction windows, scheduling, transaction logging... Platforms: Windows

EMail Detective - Forensic Software Tool - for use with all versions of America Online, is used by many law enforcement agencies in the U.S. and has become an invaluable tool in numerous investigations and data recovery by forensic examiners. Any AOL email that has been cached or saved on a users... Platforms: Windows

Pocket PC forensic examiner utility provides facility to extract complete software and hardware information of windows based mobile phone or other similar devices. Pocket PC hardware details investigator tool displays database records, mobile model number, serial number (IMEI), SIM IMSI number,... Platforms: Windows

The Digital Forensic Tool Testing (DFTT) project creates test images for digital forensic acquisition and analysis tools. These images can be used by a tool developers and owners to test their software. Platforms: Windows, Mac, Linux

The Autopsy Forensic Browser is a graphical interface to the command line digital investigation analysis tools in The Sleuth Kit. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3). The Sleuth Kit and Autopsy are both Open Source and run on UNIX... Platforms: Mac

Install SQLite Forensic Explorer and get instant access to recover SQLite database with its associated journal files. The program is developed with efficient programming that automatically loads SQLite files from a bulk of files. It is a standalone utility, which is compatible with all versions... Platforms: Windows, Windows 7, Windows 8