|
Analysis |
Instant Messengers history extraction from existing files |
|
around 30 types
|
around 30 types |
more than 50 types
|
MacOS Instant Messengers history extraction from existing files
|
|
|
|
+ |
Browser history extraction from existing files |
|
|
+ |
+ |
Email extraction from existing mailboxes |
|
|
+ |
+ |
Carving deleted data |
+
IM and browser artifacts |
+
Ultimate edition only, IM artifacts only |
+
Ultimate edition only, IM and browser artifacts |
+
Optional feature, IM and browser artifacts |
Ability to specity to carve unallocated, allocated or both |
|
|
|
+
(if carving is purchased) |
Carving MacOS drives |
|
|
|
+
(if carving is purchased) |
Carving Encase, SMART and DD images (FAT, NTFS) |
+
Pro edition only |
+
Ultimate edition only, IM artifacts only |
+
Ultimate edition only, IM and browser artifacts |
+
(if carving is purchased), IM and browser artifacts |
Carving Encase, SMART and DD images (HFS, HFS+) |
|
|
|
+
(if carving is purchased), IM artifacts only |
Live RAM analysis |
+
Pro edition only |
+
Ultimate edition only, IM artifacts only |
+
Ultimate edition only, IM and browser artifacts |
+
Optional feature, IM and browser artifacts |
Hibernation file analysis |
|
|
|
+
Optional feature, IM and browser artifacts |
Page file analysis |
|
|
|
+
Optional feature, IM and browser artifacts |
Network traffic PCAP files analysis |
|
|
|
+
Optional feature, OSCAR and XMPP protocols only |
Porn detection for pictures/videos |
|
|
|
+
Optional feature |
Face detection for pictures/videos |
|
|
|
+
Optional feature |
Text detection for pictures/videos |
|
|
|
+
Optional feature |
Ability to handle more than 2Gb of data |
|
|
|
+ |
|
Search for artifacts |
Search for existing history profiles on real drives |
|
+ |
+ |
+ |
Search for existing history profiles on Encase, SMART and DD images
(FAT, NTFS) |
|
+
Pro and Ultimate edition only |
+
Pro and Ultimate editions only |
+
Optional feature |
Search for existing history profiles on Encase, SMART and DD images
(HFS, HFS+) |
|
|
|
+
Optional feature |
Search for pictures |
|
|
|
+ |
Search for videos |
|
|
|
+ |
|
Export |
Export to text, HTML, XML |
+ |
+ |
+ |
+ |
Export to CSV |
|
+ |
+
IM artifacts only |
+ |
Export to PDF |
|
|
|
+ |
Ability to export selected items |
+ |
+ |
+
IM artifacts only |
+ |
Ability to export bookmarked items |
|
|
|
+ |
Ability to export search results |
|
|
|
+ |
Ability to customize report template |
|
|
|
+ |
|
Case management |
Information is broken by cases |
|
|
|
+ |
Information is persistently stored in a database |
|
|
|
+ |
Users may be granted or denied rights to specific case |
|
|
|
+ |
Items may be persistently bookmarked |
|
|
|
+ |
Hash calculation for profiles |
|
|
|
+ |
|
User interface |
Multiple monitors support |
|
|
|
+ |
Ability to adjust product windows |
|
|
|
+ |
Task Manager allowing to stop long running task |
|
|
|
+ |
|
Picture operations |
Preview selected images thumbnails |
|
|
|
+ |
Showing EXIF properties |
|
|
|
+ |
Showing pictures with GPS on Google Maps |
|
|
|
+ |
Showing pictures with GPS on Google Earth |
|
|
|
+ |
Saving pictures with GPS in Google Earth format (kml) |
|
|
|
+ |
Filtering pictures |
|
|
|
+ |
Creating custom filters for pictures |
|
|
|
+ |
Copying pictures from a profile or filter to a selected folder
|
|
|
|
+ |
|
Video operations |
Extracting key frames for a video |
|
|
|
+
Optional feature
|
|
Multi-user operations |
Ability to access central database in LAN |
|
|
|
+
Enterprise edition only
|
Simultaneous work on the same case from different machines |
|
|
|
+
Enterprise edition only
|
User management |
|
|
|
+
Enterprise edition only
|
Restricting access to a case for particular user or role |
|
|
|
+
Enterprise edition only
|
Granting read-only access to a particular case |
|
|
|
+
Enterprise edition only
|
|
Price (fixed license)
|
Enterprise |
|
|
|
Starts
at $9999,95 |
Ultimate |
|
$499,95 |
$649,95 |
|
Professional |
$199,95 |
$299,95 |
$349,95 |
|
Standard |
$99,95 |
$199,95 |
$249,95 |
$999,95-$2749,95 |
|
Purchase now
|
Purchase now
|
Purchase now
|
Purchase now
|