A forensic imaging program that will acquire or hash a bit-level forensic image with full MD5, SHA1, SHA256 hash authentication. Acquire a physical drive, logical drive, folders and files, remote devices (using servlet), or re-acquire a forensic image.
Write forensic images files as:
Supports none, fast, good or, best compression methods.
Supports EnCase None, Fast, Good, Best compression settings for E01 and L01 formats.
Writes acquisition information within EnCase E01 and L01 formats.
Records a detailed log file including device details and source and verification hash information.
FEX Imager is a 64 bit application.
Minimum recommended system requirements are:
Run as local Administrator to ensure that sufficient access rights are available for access to devices.
FEX Imager does not support the acquisition of HPA or DCO areas (The HPA and DOC are two areas of a hard drive that are not normally visible to an operating system or an end user. Whilst the HPA and DCO are hidden, it is technically possible for a user to access these areas and store/hide data).