WholeClear Investigator Reviews

WholeClear Investigator Description

WholeClear Investigator is a powerful desktop tool utilized by digital forensic analysts, eDiscovery professionals, corporate compliance officers, and teams responding to incidents on Windows systems. This application is capable of thoroughly examining various types of email repositories, documents, images, directories, and backups. It supports a range of email formats such as PST, OST, EML, EMLX, MSG, MBOX, and NSF, with the caveat that NSF files require a compatible Notes client for processing. Users have the ability to delve into message headers, content, attachments, and the routing paths taken by messages; they can also conduct searches across indexed evidence using a variety of methods including Boolean operators, phrases, field filters, wildcards, and regular expressions. Additionally, the software provides tools to visualize communication patterns and sender-recipient interactions through dynamic graphs. It meticulously logs SHA-256 hashes, identifies processing anomalies, records audit details, and maintains chain-of-custody information for accountability. Users can seamlessly export case results and reports in multiple formats such as CSV, Excel, JSON, HTML, and PDF for further analysis or documentation. Furthermore, the OCR feature allows for text extraction from supported images and scanned documents when activated, enhancing the breadth of data that can be analyzed. The compatibility of supported formats is influenced by the specific parser and configuration set for each case, ensuring versatility in its application.