more complete in less time

tenderlaSoftware and s/w Development

Dec 13, 2013 (3 years and 5 months ago)

58 views

How to make your investigation
more complete in less time





Belkasoft customers

Belkasoft Evidence Center 2013


Office documents


Instant Messenger Chats


Emails


Browsing history


Social Network Chats


MMORPG chats, VR


P2P data


Pictures


Videos


Encrypted files

Belkasoft Evidence Center 2013


System Files


Thumbnails,
jumplists


Registries


Deleted SQLite databases


SQLite
freelists

(deleted iPhone
SMSes

etc
)

Where?


Hard drives and other media (e.g. removable)


EnCase
,
SMART and FTK drive images (incl. Ex01)


Live RAM dumps


Hibernation files


Pagefiles


PCAP files


Mobile device backups



Windows


Linux


Mac OS X

Analysis


Face, text and pornography detection in
pictures


Forgery detection for pictures


EXIF and GPS coordinates analysis for picture


Encrypted files detection

Belkasoft and
EnCase


Integrated with EnCase v.7 (7.02
-
7.07)


Can be run using free
EnScript

module


Processes E01s & Ex01s


Imports found evidence back to Encase


Product is available in Encase App Central

Belkasoft and
Passware


Integrated with
Passware

11.5 and newer


Can decrypt files right from Evidence Center


Can patch files right from Evidence Center

Free copy


Free copy to
the conference attendees
!


Write to
support@belkasoft.com
!


Demo


how it works?