Hash individual files for analysis.Ĭluster, sector, or byte level keyword search of entire media using text, regex or hex expressions.įorensic Explorer is Unicode compliant. Save and load personal work-space configurations to suit investigative needs.Īpply hash sets to a case to identify or exclude known files. L01 forensic evidence files.ĭetach drag and drop views for a customized work-space on multiple monitors. Byte Plot and Character Distribution: Examine individual files using Byte Plot graphs and ASCII character distribution.Įmail support for PST, OST, EDB, MBOX formats. Full keyword and index search capabilities for email.Įxport files to disk, or direct to.File Extent: Quickly locate the location of files on disk with start and end sector runs.Automatically decode values with the data inspector. Text and Hexadecimal: Access and analyze data at a text or hexadecimal.
Gallery: Thumbnail photos and image files.Zoom in and out to graphically map disk usage. Disk: Navigate a disk and its structure via a graphical view.File List: Sort and multiple sort files by attribute, including, extension, signature, hash, path and created, accessed and modified dates.Inbuilt data carving tool to carve more than 300 known file types. View and analyze system files, file and disk slack, swap files, print files, boot records, partitions, file allocation tables, unallocated clusters, etc. No major version upgrade costs (valid maintenance give access to the latest build).īookmark, flag, or categorize potential evidence.Īccess all areas of physical or imaged media at a file, text, or hex level.Forensic Explorer includes a stand-alone license of Mount Image Pro.Key Features forensic-explorer-facts-sheet (English)
0 kommentar(er)
