-
Hibernation Recon
HIBERNATION RECON The tools and techniques used for many years to analyze Microsoft Windows® hibernation files have left digital forensics experts in the dark… until now! Hibernation Recon not only supports active memory reconstruction from Windows XP, Vista, 7, 8/8.1, and 10 hibernation files, but also extracts massive volumes of information from the multiple types […]
-
Arsenal Image Mounter
ARSENAL IMAGE MOUNTER Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows®. Arsenal Image Mounter includes a virtual SCSI adapter (via a unique Storport miniport driver) which allows users to benefit from disk-specific features in Windows like integration with Disk Manager, access to Volume Shadow Copies, and more. As […]
-
Registry Recon
REGISTRY RECON Registry Recon is not just another Registry parser. It’s developed with powerful new methods to parse Registry data so that Registries which have existed on a Windows® system over time can be rebuilt, providing unique insight into how Registry data has changed over time. Registry Recon provides access to an enormous volume of […]
Arsenal Recon