Forensic Acquisition

---

 Belkasoft Remote Acquisition (Belkasoft R) is a new tool developed specifically for remote extraction of hard and removable drives, RAM, connected mobile devices, and even specific types of data. Belkasoft R will be useful in cases when an incident response analyst or a digital forensic investigator needs to gather evidence quickly and the devices in question are situated in geographically distributed locations. 

 macOS Volatile Data Collection – Automatic Volatile Data collection of important artifacts related to malware, hacking and user logins. 

 Support for Apple Silicon, T2 Security Chips, APFS File Systems, and Local Time Machine Snapshots (APFS Snapshots). 

Support for Apple Silicon, T2 Security Chips, APFS File Systems, and Local Time Machine Snapshots (APFS Snapshots).

Support for macOS, Windows, and Linux with all the features of PALADIN PRO.  

The Tableau Forensic SATA/IDE Bridge is a portable write-blocker that enables forensic acquisition of SATA and IDE solid-state-drives.  A second-generation Tableau product, replacing the Tableau T35es.  FEATURES  Suitable for both the field and lab  USB 3.0 host computer connection   Seven LEDs provide status on power, IDE media detection, SATA media detection, host connection, write-block status, and activity  Read/write mode capability via internal DIP switch  Free Tableau firmware updates