Examine any or all of the following file systems:.Maintains multi-tool compatibility by reading and writing images in the pervasive UNIX .dd format.Creates bit-stream copy of entire suspect disk, including hidden HPA section, to keep the original evidence safe.Automatically creates and records MD5, SHA1 and SHA256 hashes of evidence files to prove data integrity.Preview and search suspect files to find evidence quickly and without altering any data or metadata.ProDiscover has been designed to satisfy the requirements of NIST Imaging Tool Specification.įollowing are some of the key features of ProDiscover Forensics: ProDiscover is integrated with a full text search engine, set of embedded viewers and hash comparison methods, all together providing an easy-to-use and yet powerful toolkit to forensic investigators. The resulting reports meet evidentiary quality requirements. ProDiscover ensures that both the capturing and analysis processes are performed by applying forensically sound methods. The product supports a wide variety of Windows, Linux and Mac file systems. ProDiscover is a disk forensics system which provides a host of features to capture and analyse disks. ProDiscover Forensics is a powerful computer security tool that enables law enforcement professionals to find all the data on a computer disk while protecting evidence and creating evidentiary quality reports for use in legal proceedings.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |