|  | P2 Commander | | AccessData FTK v2.0 | | Guidance
EnCase Forensic 6.0 |
| | | | |
|  |  |
| Price |
$1,095 | $1,995 |
$2,995-$3,830 |
$2,850-$3,600 |
| Evidence Acquisition |
|
|
|
| Acquire Folders and Files |
 |
 |
|
| Boot Disk Support |
|
|
|
| Creates Image in PFR Format |
 |
|
|
| Creates Image in VHD Format |
|
|
|
| Creates Image in RAW Format |
|
|
|
| Creates CD-ROM ISO Image |
|
|
|
| DoD Standard Wiping of Hard Drives and Media |
|
|
|
| Support for Write Blocking Hardware |
|
|
|
| Compress Image |
|
|
|
| Create Hash Database |
|
|
|
| Hash Image |
|
|
|
| Read dd/EO1 (Created with EnCase)/Safeback 2.2 Images |
|
|
|
| Analysis |
|
|
|
| Illicit Image Detection |
|
|
|
| Uses Database to Support Large Volumes of Data |
|
|
|
| Task Scheduler to Optimize Time |
|
|
|
| Multi-Threading to Optimize CPU Usage |
|
|
|
| Boolean Search Support |
|
|
|
| Regular Expression/GREP Search Support |
|
|
|
| Alternate Data Streams |
|
|
|
| Disk Preview |
|
|
|
| Virtually Mount Disk Images |
|
|
|
| Data Carving (E-mail Addresses, Slack Space, Unallocated Space, Within Files) |
|
|
|
| External Viewer Support |
|
|
|
| Sort by File Type Using File Header |
|
|
|
| Filter Encrypted Files |
|
|
|
| Filter by Hash Set |
|
|
|
| Full Disk Search |
|
|
|
| Hash Set Recognition |
|
|
|
| Integrated Graphics Viewer |
|
|
|
| Integrated Outlook (.PST) Viewer |
|
|
|
| Integrated Outlook Express Viewer |
|
|
|
| Integrated AOL Viewer |
|
|
|
| Integrated The Bat! Viewer |
|
|
|
| Integrated Thunderbird Viewer |
|
|
|
| Integrated RFC822 Compliant E-mail Viewer |
|
|
|
| Integrated Eudora Viewer |
|
|
|
| Integrated Lotus Notes (NSF) Viewer |
|
|
|
| Integrated Exchange (EDB) Viewer |
|
|
|
| Integrated GroupWise Viewer |
|
|
|
| E-mail Specific Search Engine |
|
|
|
| Integrated Chat Database Parser |
|
|
|
| Chat Log Specific Search Engine |
|
|
|
| Integrated IE Cache Parser |
|
|
|
| Integrated OLE Storage Parser |
|
|
|
| Export E-mail Data to RFC822 Compliant E-mail, E-mail Examiner, OLE message, & Outlook (.PST) |
|
|
|
| Selective Search |
|
|
|
| Scripting |
|
|
|
| SHA1 File Hash |
|
|
|
| MD5 File Hash |
|
|
|
| Windows Registry Analyzer |
|
|
|
| Windows System Analyzer |
|
|
|
| NTFS Compressed Files |
|
|
|
| Recover Deleted Files |
|
|
|
| Password Recovery |
|
|
|
| File Formats |
|
|
|
| Fat 12/16/32 |
|
|
|
| NTFS |
|
|
|
| NTFS S/W RAID |
|
|
|
| CDFS |
|
|
|
| Linux |
|
|
|
| Unix |
|
|
|
| Mac |
|
|
|
| Disk Access |
|
|
|
| FireWire |
|
|
|
| IDE/EIDE |
|
|
|
| SATA |
|
|
|
| SCSI |
|
|
|
| Reporting |
|
|
|
| Create HTML Reports |
|
|
|
| Create Text Reports |
|
|
|
| Create CSV Reports |
|
|
|
