+
+

Related Products

  • Polonious
    2 Ratings
    Visit Website
  • LegalEdge
    17 Ratings
    Visit Website
  • TraceEngine
    1 Rating
    Visit Website
  • Graylog
    440 Ratings
    Visit Website
  • ManageEngine Log360
    196 Ratings
    Visit Website
  • NeuBird
    2 Ratings
    Visit Website
  • SearchUnify
    150 Ratings
    Visit Website
  • QA Wolf
    273 Ratings
    Visit Website
  • MOVEit
    625 Ratings
    Visit Website
  • InEight
    168 Ratings
    Visit Website

About

The Gold Standard in Forensic Investigations – including Mobile Acquisition. Improve investigation efficiency with the release of optical character recognition (OCR) support that seamlessly extracts embedded text from scanned images, documents and PDFs as part of the evidence collection workflow. 21.2 also expands social media artifact support and includes an enhanced workflow with a new summary view that allows users to cross-reference disparate artifact types, significantly improving evidence processing workflows. OpenText Security (formerly Guidance Software) created the category for digital investigation software with EnCase Forensic in 1998. EnCase has maintained its reputation as the gold standard in criminal investigations and was named the Best Computer Forensic Solution for eight consecutive years by SC Magazine. No other solution offers the same level of functionality, flexibility, and has the track record of court-acceptance as EnCase Forensic.

About

Sherlock Forensics Disk Imager is a Windows desktop tool for creating forensic images of physical drives for digital evidence acquisition. It writes raw DD images, including segmented files, and EWF E01 images that can be opened by forensic analysis tools. The imager records case, evidence and examiner details in a manifest and E01 metadata, computes SHA-256 hashes, and supports SHA-1 and MD5. Its verification workflow reads the source and completed image to check data integrity; additional functions include bad-sector logging, a live acquisition console, and a safeguard against saving an image to the same physical drive being read. Intended for digital forensic examiners, law enforcement, incident responders and corporate investigators, it supports dead-disk and Windows live-acquisition workflows on 64-bit Windows 10 and 11. The standalone executable runs locally without an installer or runtime dependencies.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Supported
iPad Not Supported
Android Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Not Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

IT security teams and investigators looking for a forensic investigation solution to facilitate the management and efficiency of investigations

Audience

Digital forensic examiners, law enforcement, legal teams, incident responders and corporate investigators.

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

No images available

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Pricing

$0
Free to download and use, with no trial period, feature restrictions or license fee.
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

OpenText
Founded: 1998
Canada
security.opentext.com/encase-forensic

Company Information

Sherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/pages/sherlock-disk-imager.html

Alternatives

Alternatives

Sherlock Forensics Recover

Sherlock Forensics Recover

Sherlock Forensics
Android Acquirer

Android Acquirer

Sherlock Forensics
Android Acquirer

Android Acquirer

Sherlock Forensics
LLIMAGER

LLIMAGER

e-Forensics Inc

Categories

Digital Forensics Supported

Categories

Disk Imaging Supported

Integrations

OpenText Security Suite Supported
Symantec Data Center Security Supported
Tableau Supported
Trellix Endpoint Security (HX) Supported

Integrations

OpenText Security Suite Not Supported
Symantec Data Center Security Not Supported
Tableau Not Supported
Trellix Endpoint Security (HX) Not Supported
Claim EnCase Forensic and update features and information
Claim EnCase Forensic and update features and information
Claim Sherlock Forensics Disk Imager and update features and information
Claim Sherlock Forensics Disk Imager and update features and information