 |
Encase Unallocated |
 |
| P2 eXplorer 1.0 |
|
Paraben's P2 eXplorer allows you to mount a forensic image (or Linux DD, RAW, or other drive images) and explore it as though it were a drive on your machine while preserving the forensic nature of your evidence. This means that an image isn't just mounted to view logical files, it is mounted as the actual bitstream image, preserving unallocated, slack, and deleted data.
Released: 2005-03-24
License: $199.00
Publisher: Paraben Corporation
Language: English
Platform: Windows
|
Good tool for it`s purpose I was trying to recover a file that a user had deleted. I captured an image of the disk using the Linux dd command. I was able to mount this image...
| Paraben's Forensic Sorter 2.0.1 |
|
Designed for computer forensic examiners to help organize and speed up the examination of the contents of a hard drive, Forensic Sorter allows you to sort the contents of entire hard drives into categories such as video, audio, spreadsheets, etc. so you can easily find what you're looking for. Filter out common Windows files, recover deleted files or file fragments in slack, deleted, and unallocated space.
Released: 2006-07-19
License: $169.00
Publisher: Paraben Corporation
Language: English
Platform: Windows
|
|
Audio & Multimedia
