Nowadays, computer forensics is used more frequently by security and law-enforcing agencies to detect traces of wrongdoings among employees and particular users. This program performs an in-depth analysis of systems to detect evidence that can convict cyber criminals and other delinquents.
Although its functions are very specialized, it is really easy to use. You can start by creating a case by typing its name and that of the investigator, as well as other data regarding the custody of information, the body requesting the investigation, and so on. The program has powerful capabilities. You can search files by name and select those you want to inspect. This process is done in mere seconds, unlike other file search methods, which can take several minutes or even hours. You can also search among the deleted files those that were destroyed by the delinquent to erase any evidence. This process takes a while, since, as I've said, it is a very in-depth search.
The program has many other functions, such as a recent activity research function, a built-in web browser so you don't need to perform Internet functions outside the program, and much more. Thus, you will need to read the full manual to become familiar with all the program's functionalities.
Since the program is aimed at corporate and law-enforcing users, its cost is not affordable for common users. Nevertheless, if you need to research a computer in search of specific data for security purposes, then you may find it useful.
You can use the shareware version of the program during 30 days. If you find it useful and want to use it longer, then you will need to purchase a license.
v1.2 [Aug 31, 2012]
Fixed indexing for drive root.
Fixed bug causing certain case items to not load correctly.
Fixed bug where NTFS file data reads were not sector aligned.
Fixed error loading DirectIo Driver.
Added warning message that search reuslts are limited to 1,000,000
Added cancel button to stop drive scanning in the raw disk viewer
Added ability to jump to disk offset of deleted files in the deleted files search
The device name is now displayed for deleted ext2 files in the deleted files search
Fixed artifact issue when panning images in the internal file viewer
Fixed cancel functionality for FAT/ext2 in the deleted files search
Fixed a bug where if there were no hash databases then the "New DB" button was disabled at startup and no new databases could be created
Fixed a bug preventing the recent activity scan from searching the root directory of a drive
Fixed a crash when retrieving MFT values
File carving of physical disks bug fixes
Image restore now allows image files that are smaller than the disk size.
Added support for FAT12 file system.
Fixed a bug when recoving file when carving via partition number.
Changed create index progress bar to not complete when indexing was manually cancelled.
Added new "Max results" option to search index options.
Added "Display search results" and "Display search results & add to case" right click options for the history tab of search index.
Significantly reduced memory usage of open cases with a large number of items.
Share images, video and music between your Android and Windows devices
Mall Creeps
