Forensic Imaging and Triage for the Investigation Scene
We don't just copy digital evidence; we report the first findings of an incident without going to the lab. Image a write-protected source with one touch and examine it at the scene with the DFIR, e-Discovery and Mobile Device modules.
The modules build on a copy you can trust. Imaging is done by an engine proven on real hardware.
The source is opened read-only; evidence is never written, under any condition.
The image format you need: physical, logical, clone or clone + image.
Targets are verified by reading back and comparing hashes.
Image one source to one, two or three targets at the same time.
Warns about hidden areas and encrypted volumes.
Every acquisition is documented with a hash-chained audit log.
Three sections built on top of imaging. Each one runs at the scene with one touch on the device's touchscreen.
Fast triage at the scene
Index once, search instantly
Plug in, copy, report
Start the work that runs from the scene to the lab in the field, and finish it there too.
Connect the source write-protected and image it to one, two or three targets at the same time.
Pull the first findings with the DFIR, e-Discovery or Mobile Device module without going to the lab.
An automatic acquisition record and a report that opens in any browser are ready on the target drive, with findings, events and the integrity log.
From red to green: the source stays untouched, the target is verified.
Copy evidence write-protected and report the first findings at the scene, without going to the lab.
Use the DFIR module to scan Windows, Linux and macOS systems with YARA, Sigma and IOCs, and lay out findings with MITRE ATT&CK and a timeline.
Index the image once and find relevant documents instantly with OCR, keyword and regex search.
Extract and report instant messages, locations and deleted records from Android and iOS devices.
Modules, screenshots and workflow details are on the product site.
The first findings at the scene, without going to the lab. Contact our team for a demo and technical details.