Evimetry are excited to announce a new major release. A year and a half in the making, it’s faster, easier to use, and supports more hardware than ever.
The biggest news is Evimetry now support dongle free acquisitions. Combined with in-Controller Deadboot creation, you can now provision a single USB drive to act as both a Deadboot and evidence storage repository. The licence attached to it lasts 2 days from provisioning time and is bound to a specific disk. The feature is perfect for dealing with low port count laptops and is super convenient for regular computers.
Evimetry are giving our existing licensees a detached licence count equal to their current licence (to use in addition to their existing licence count) for the remaining period of their current licence.
The other big news is that Evimetry’s stable release is again back in parity with the latest (and not so latest) Mac hardware, after some recent advances in Mac support in the Linux kernel.
Broad hardware support.
Evimetry now provide two Deadboot flavours. One with support for the newest hardware and a graphical user interface. The other supports older legacy hardware with a console user interface. Whether you are dealing with the newest EFI based Mac’s or old servers you’re covered.
Simpler deadboot creation.
Deadboot USB drives can now be created in a snap within the Controller. With a single drive serving both as a Deadboot and Evidence Repository, scarce USB ports are freed up on suspect devices, workflow is simplified, and the number of devices to manage limited.
For low port count laptops and single-computer acquisitions licencing via dongle can be inconvenient. Provision an Imager Deadboot with a dongle-free licence in a few mouse clicks and start acquiring without a dongle.
Low-interaction targeted acquisition.
With Evimetry Collector configure a Deadboot with an acquisition profile and boot the suspect computer into the deadboot. After that, no further interaction necessary. Acquires the highest priority data in the least time, and all the data when time permits. Evimetry Collector is included with Evimetry Advanced Imager and higher licences.
[columns size=”1/2″ last=”false”]
Visually muted targeted acquisition.
The Collector Black user interface provides a simple muted user interface for Evimetry Collector for use in low light environments.
Deeper metadata acquisition.
More metadata from suspect disks is preserved. For USB attached disks, the VID & PID of the bridge is preserved, and for drives attached to modern USB bridges, the serial number of the disk is recorded (as opposed to the serial number of the USB bridge).