Utilize Perl scripts to automate investigation tasks.Integrated thumbnail graphics, internet history, event log file, and registry viewers to facilitate investigation process.Examine Sun Solaris UFS file system and Linux ext2 / ext3 file systems.
Examine FAT12, FAT16, FAT 32 and all NTFS file systems including Dynamic Disk and Software RAID for maximum flexibility.Utilize user provided or National Drug Intelligence Center Hashkeeper database information to positively identify files.Automatically generate and record MD5, SHA1 or SHA256 hashes to prove data integrity.