Sherlock Forensics RecoverSherlock Forensics
|
THORNextron Systems
|
|||||
Related Products
|
||||||
About
Sherlock Forensics Recover is Windows desktop software for browsing drives and disk images, creating forensic images, and recovering deleted files. It supports Windows 10 and 11 and FAT32, NTFS, exFAT, APFS, HFS+, ext, XFS, Btrfs, and ZFS. Quick and deep scans support signature-based carving, lost-partition searches, and RAID reconstruction. Results are identified as measured from file metadata, located by signature, or placed by assumption; likely overwritten files are flagged. The software creates self-contained offline HTML reports, records SHA-256 hashes, and is designed not to write to the source drive. A free edition is available. The Pro edition is a $295 one-time purchase and adds recovery features and pagefile analysis for URLs, paths, IP addresses, and credentials. It is intended for forensic examiners, IT professionals, and data recovery specialists. The installer is EV-signed and SHA-256 verified.
|
About
THOR is the most sophisticated and flexible compromise assessment tool on the market. Incident response engagements often begin with a group of compromised systems and an even bigger group of systems that are possibly affected. The manual analysis of many forensic images can be challenging. THOR speeds up your forensic analysis with more than 12,000 handcrafted YARA signatures, 400 Sigma rules, numerous anomaly detection rules and thousands of IOCs. THOR is the perfect tool to highlight suspicious elements, reduce the workload and speed up forensic analysis in moments in which getting quick results is crucial. THOR focuses on everything the Antivirus misses. With its huge signature set of thousands of YARA and Sigma rules, IOCs, rootkit and anomaly checks, THOR covers all kinds of threats. THOR does not only detect the backdoors and tools attackers use but also outputs, temporary files, system configuration changes and other traces of malicious activity.
|
|||||
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Not Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
Platforms Supported
Windows
Supported
Mac
Supported
Linux
Supported
Cloud
Not Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
|||||
Audience
Forensic examiners, IT professionals, data recovery specialists, legal teams, and anyone recovering deleted files.
|
Audience
IT teams searching for an APT Scanner solution
|
|||||
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
Support
Phone Support
Not Supported
24/7 Live Support
Not Supported
Online
Supported
|
|||||
API
Offers API
Not Supported
|
API
Offers API
Not Supported
|
|||||
Screenshots and VideosNo images available
|
Screenshots and Videos |
|||||
Pricing
$0
Free edition: browse, preview, export files, and create raw or E01 disk images. Pro is a $295 one-time purchase with no subscription; it adds deleted-file recovery, unallocated-space carving, RAID reconstruction, lost-partition search, and recovery of previous Windows versions.
Free Version
Supported
Free Trial
Not Supported
|
Pricing
No information available.
Free Version
Not Supported
Free Trial
Not Supported
|
|||||
Reviews/
|
Reviews/
|
|||||
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
|||||
Company InformationSherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/data-recovery-software
|
Company InformationNextron Systems
Founded: 2017
Germany
www.nextron-systems.com/thor/
|
|||||
Alternatives |
Alternatives |
|||||
|
|
|
|||||
|
|
||||||
|
|
||||||
|
|
|
|||||
Categories |
Categories |
|||||
Integrations
Mesh
Not Supported
|
||||||
|
|
|