Android AcquirerSherlock Forensics
|
Cyber TriageSleuth Kit Labs
|
|||||
Related Products
|
||||||
About
Android Acquirer is desktop software for consent-based logical acquisition and examination of Android phones and tablets. It connects through Android Debug Bridge (ADB) and a helper application to collect selected device data, including messages, contacts, call records, media, apps and artifacts. Examiners can review extracted records, preserve acquisition details and produce forensic PDF reports with chain-of-custody information and SHA-256 hashes. The software is intended for digital forensic examiners, law-enforcement and legal teams, corporate investigators and other professionals handling authorized device examinations. A free edition supports device detection and inventory checks; the Forensic Edition adds full extraction and reporting. Windows and Linux downloads are offered. It supports examiners who need documented, repeatable workflows for consent-based mobile-device investigations.
|
About
Fast & Affordable Forensics for Incident Response. Automated incident response software for fast, comprehensive, and easy intrusion investigations. An alert is generated from IDS or SIEM. An endpoint investigation is started from SOAR manually. Cyber Triage is deployed to the endpoint to collect data. Analyst uses Cyber Triage data to find evidence and make decisions. Manual incident response is slow, leaving the entire organization at the intruder’s mercy. By automating every phase of the endpoint forensics process, Cyber Triage ensures state-of-the-art remediation speed. Cyber threats are constantly evolving, and manual incident response can be inconsistent and incomplete. Always operating on the latest threat intelligence, Cyber Triage scours every relevant corner of a compromised endpoint. Forensic tools are often confusing, with features not needed for intrusions. Cyber Triage’s intuitive interface allows even junior staff to analyze data and assemble reports.
|
|||||
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Supported
Cloud
Not Supported
On-Premises
Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Supported
Cloud
Supported
On-Premises
Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
|||||
Audience
Digital forensic examiners, law enforcement, legal teams, mobile forensics labs, and corporate investigators.
|
Audience
Security teams and investigators who want an automated forensics software for incident response in order to analyze data and assemble reports
|
|||||
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
|||||
API
Offers API
Not Supported
|
API
Offers API
Not Supported
|
|||||
Screenshots and Videos |
Screenshots and Videos |
|||||
Pricing
$399 one-time
A free edition supports device checks and inventory. The Forensic Edition is $399 USD one-time, with no subscription.
Free Version
Supported
Free Trial
Not Supported
|
Pricing
$2,500
Free Version
Supported
Free Trial
Supported
|
|||||
Reviews/
|
Reviews/
|
|||||
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
Training
Documentation
Supported
Webinars
Supported
Live Online
Supported
In Person
Supported
|
|||||
Company InformationSherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/pages/sherlock-android-acquirer.html
|
Company InformationSleuth Kit Labs
Founded: 2023
United States
www.cybertriage.com
|
|||||
Alternatives |
Alternatives |
|||||
|
|
|
|||||
|
|
|
|||||
|
|
|
|||||
|
|
|
|||||
Categories |
Categories |
|||||
Incident Response Features
Attack Behavior Analytics
Supported
Automated Remediation
Supported
Compliance Reporting
Supported
Forensic Data Retention
Supported
Incident Alerting
Supported
Incident Database
Supported
Incident Logs
Supported
Incident Reporting
Supported
Privacy Breach Reporting
Not Supported
Security Orchestration
Not Supported
SIEM Data Ingestion / Correlation
Supported
SLA Tracking / Management
Not Supported
Threat Intelligence
Supported
Timeline Analysis
Supported
Workflow Automation
Supported
Workflow Management
Supported
|
||||||
Integrations
Elastic Security
Not Supported
IBM Cloud
Not Supported
IBM QRadar SIEM
Not Supported
Microsoft Defender for Endpoint
Not Supported
SentinelOne Singularity
Not Supported
Splunk Cloud Platform
Not Supported
Splunk SOAR
Not Supported
Swimlane
Not Supported
|
Integrations
Elastic Security
Supported
IBM Cloud
Supported
IBM QRadar SIEM
Supported
Microsoft Defender for Endpoint
Supported
SentinelOne Singularity
Supported
Splunk Cloud Platform
Supported
Splunk SOAR
Supported
Swimlane
Supported
|
|||||
|
|
|