We found the performance to be exceptional and the results of having all of the images - computers and phones - in the same case made analysis easy. All of these images were placed into a single case, which was then processed. We read two hard-disk images into FTK 4 and then added dumps from two mobile devices. This makes correlation fast and straightforward. It outputs a file that can be added directly into a case, along with images from computers. The Mobile Phone Examiner Plus (MPE+) adds mobile devices to the repertoire. These two new modules allow examiners to perform a deep dive into malware on the disk under examination (Cerberus) and to examine e-mail and documents in an entirely new way (Visualizer).
The new FTK 4 is pretty much the same set of tools that we are used to seeing from AccessData - until you add the company's exciting new modules, Cerberus and Visualization. Add its Password Recovery Toolkit (not reviewed here) and you've got the whole shebang. The suite of computer forensic tools from AccessData Group that we tested is a nearly complete examiner's tool kit.
0 kommentar(er)
