Forensic Acquisition
Belkasoft Remote
Belkasoft Remote Acquisition (Belkasoft R) is a new tool developed specifically for remote extraction of hard and removable drives, RAM, connected mobile devices, and even specific types of data. Belkasoft R will be useful in cases when an incident response analyst or a digital forensic investigator needs to gather evidence quickly and the devices in question are situated in geographically distributed locations.
ReconITR
macOS Volatile Data Collection – Automatic Volatile Data collection of important artifacts related to malware, hacking and user logins.
Support for Apple Silicon, T2 Security Chips, APFS File Systems, and Local Time Machine Snapshots (APFS Snapshots).
Support for Apple Silicon, T2 Security Chips, APFS File Systems, and Local Time Machine Snapshots (APFS Snapshots).
Support for macOS, Windows, and Linux with all the features of PALADIN PRO.
Tableau Forensic SATA/IDE Bridge
The Tableau Forensic SATA/IDE Bridge is a portable write-blocker that enables forensic acquisition of SATA and IDE solid-state-drives. A second-generation Tableau product, replacing the Tableau T35es. FEATURES Suitable for both the field and lab USB 3.0 host computer connection Seven LEDs provide status on power, IDE media detection, SATA media detection, host connection, write-block status, and activity Read/write mode capability via internal DIP switch Free Tableau firmware updates
