IEF TRIAGE

Print

IEF-Triage

Designed for forensic examiners & military/intelligence operatives in law enforcement & government, as well as IT security personnel in corporations who are conducting forensic examinations in the field, or on live systems.

  • Runs from a USB dongle, maintains forensic integrity of data
  • Used for a forensic investigation on a live system
  • Run in “Stealth mode” for covert operations
  • Built-in live RAM capture capability

Powerful Search Capabilities:Search 160+ Internet artifacts and recover more data from more locations.

Powerful Search Capabilities

  • Recover data from social networking communications, instant messenger chats, cloud-based artifacts, P2P file sharing apps, mobile backups, webmail, web browser history, pictures and videos
  • Proprietary carving technique recovers more data from unallocated space & RAM
  • Searches entire logical or physical drives: E01,Ex01,L01,Lx01 and dd images
  • Searches Files including the pagefile.sys, hiberfil.sys, and more
  • Ability to search multiple drives, images, file & folders in a single search

 

 

 

 

 

 

 

 


Find Evidence Quickly: Get immediate search results so you can start working with the data right away.

Powerful Search Capabilities

  • Use “Quick Search” preset to see what’s there and focus the investigation
  • Review results in real-time without having to wait for search to complete
  • Target search by artifact type, keyword and location on hard drive
  • Refine search results by skin tone & body part detection

 

 

 

 


Comprehensive Reporting: Flexible reporting and categorization to narrow down evidence quickly.

Powerful Search Capabilities

  • Rebuild web pages in their original format on the date they were visited
  • Parsed search queries for user keyword searches on major search engines
  • Web history categorization (i.e. dating, cloud, classified, chat and social media sites)
  • Search, filter, and bookmark important evidence
  • Export report in html, pdf, excel, csv, and tab-delimited formats
  • Share “Portable Case Folder” with other investigators and stakeholders

Bizi Takip Edin!