OSForensicsPassMark Software
|
Sherlock Forensics Disk ImagerSherlock Forensics
|
|||||
Related Products
|
||||||
About
Extract forensic data from computers, quicker and easier than ever. Uncover everything hidden inside a PC. Discover relevant data faster through high performance file searching and indexing. Extract passwords, decrypt files and recover deleted files quickly and automatically from Windows, Mac and Linux file systems. Identify evidence and suspicious activity through our hash matching and drive signature analysis features. Identify and analyze all files and even automatically create a timeline of all user activity. 360° Case Management Solution. Manage your entire digital investigation with OSF’s new reporting features. Build custom reports, add narratives and even attach your other tools’ reports to the OSF report. Volatility Workbench is a graphical user interface (GUI) for the Volatility tool. OSForensics courses offered to suit a diverse range of users and skill sets. Write an image concurrently to multiple USB Flash Drives.
|
About
Sherlock Forensics Disk Imager is a Windows desktop tool for creating forensic images of physical drives for digital evidence acquisition. It writes raw DD images, including segmented files, and EWF E01 images that can be opened by forensic analysis tools. The imager records case, evidence and examiner details in a manifest and E01 metadata, computes SHA-256 hashes, and supports SHA-1 and MD5. Its verification workflow reads the source and completed image to check data integrity; additional functions include bad-sector logging, a live acquisition console, and a safeguard against saving an image to the same physical drive being read. Intended for digital forensic examiners, law enforcement, incident responders and corporate investigators, it supports dead-disk and Windows live-acquisition workflows on 64-bit Windows 10 and 11. The standalone executable runs locally without an installer or runtime dependencies.
|
|||||
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Not Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
|||||
Audience
Users that need a digital forensics solution
|
Audience
Digital forensic examiners, law enforcement, legal teams, incident responders and corporate investigators.
|
|||||
Support
Phone Support
Not Supported
24/7 Live Support
Not Supported
Online
Supported
|
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
|||||
API
Offers API
Not Supported
|
API
Offers API
Not Supported
|
|||||
Screenshots and Videos |
Screenshots and VideosNo images available
|
|||||
Pricing
$799 per user per year
Free Version
Not Supported
Free Trial
Supported
|
Pricing
$0
Free to download and use, with no trial period, feature restrictions or license fee.
Free Version
Supported
Free Trial
Not Supported
|
|||||
Reviews/
|
Reviews/
|
|||||
Training
Documentation
Not Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
|||||
Company InformationPassMark Software
Founded: 1998
Australia
www.osforensics.com
|
Company InformationSherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/pages/sherlock-disk-imager.html
|
|||||
Alternatives |
Alternatives |
|||||
|
|
|
|||||
|
|
|
|||||
|
|
|
|||||
|
|
|
|||||
Categories |
Categories |
|||||
eDiscovery Features
Case Analytics
Supported
Compliance Management
Not Supported
Discussion Threads
Not Supported
Document Indexing
Not Supported
Document Tracking
Supported
Full Text Extraction
Not Supported
Keyword Search
Supported
Metadata Extraction
Not Supported
Topic Clustering
Not Supported
|
||||||
Integrations
No info available.
|
Integrations
No info available.
|
|||||
|
|
|