Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Sherlock Forensics Disk Imager is a specialized Windows application designed for the creation of forensic images from physical drives to assist in the acquisition of digital evidence. It generates raw DD images along with segmented files and EWF E01 formats, which are compatible with various forensic analysis applications. The tool meticulously documents case information, evidence details, and examiner data within a manifest and E01 metadata, while also calculating SHA-256 hashes and providing support for SHA-1 and MD5. Its verification process involves reading both the source drive and the completed image to ensure data integrity; other features include logging bad sectors, a console for live acquisitions, and a protective measure to prevent images from being saved back to the original drive. Aimed at professionals such as digital forensic examiners, law enforcement officials, incident response teams, and corporate investigators, it accommodates both dead-disk and live-acquisition processes on 64-bit versions of Windows 10 and 11. The application operates as a standalone executable, allowing it to function without the need for an installation or additional runtime dependencies, ensuring ease of use for its users. With its robust set of features, it stands out as a vital tool for those involved in the field of digital forensics.
Description
WholeClear Investigator is a powerful desktop tool utilized by digital forensic analysts, eDiscovery professionals, corporate compliance officers, and teams responding to incidents on Windows systems. This application is capable of thoroughly examining various types of email repositories, documents, images, directories, and backups. It supports a range of email formats such as PST, OST, EML, EMLX, MSG, MBOX, and NSF, with the caveat that NSF files require a compatible Notes client for processing. Users have the ability to delve into message headers, content, attachments, and the routing paths taken by messages; they can also conduct searches across indexed evidence using a variety of methods including Boolean operators, phrases, field filters, wildcards, and regular expressions. Additionally, the software provides tools to visualize communication patterns and sender-recipient interactions through dynamic graphs. It meticulously logs SHA-256 hashes, identifies processing anomalies, records audit details, and maintains chain-of-custody information for accountability. Users can seamlessly export case results and reports in multiple formats such as CSV, Excel, JSON, HTML, and PDF for further analysis or documentation. Furthermore, the OCR feature allows for text extraction from supported images and scanned documents when activated, enhancing the breadth of data that can be analyzed. The compatibility of supported formats is influenced by the specific parser and configuration set for each case, ensuring versatility in its application.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
HCL Notes
No
Pricing Details
$0
Free to download and use, with no trial period, feature restrictions or license fee.
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Sherlock Forensics
Founded
2006
Country
Canada
Website
www.sherlockforensics.com/pages/sherlock-disk-imager.html
Vendor Details
Company Name
WholeClear
Founded
2019
Country
India
Website
www.wholeclear.com/investigator/
Product Features
Disk Imaging
Backup Scheduling
No
Bare-Metal Restore
No
Compression
No
Differential Backup
No
Disk Cloning
No
Encryption
No
Image Deployment
No
Incremental Backup
No
Web Access / Restoration
No
Product Features
eDiscovery
Case Analytics
No
Compliance Management
No
Discussion Threads
No
Document Indexing
No
Document Tracking
No
Full Text Extraction
No
Keyword Search
No
Metadata Extraction
No
Topic Clustering
No