Create bit-by-bit forensic images of hard drives, floppy disks, CDs, and other electronic media for forensic analysis, backup, drive imaging, or archiving. Acquire, compress, segment, and restore your imaged media in lightening speed. Creates bit-stream images of removable media, partitions, or an entire physical hard drive. Compresses image files on the fly. Encrypts data for secure storage of evidence-128 bit. DoD standard wiping of drives.

• License: Demo
• Language: English
• Release: 2005-10-19
• Size: 989 Kb
• Cost: 189.00 $

Tool for e-crime/forensic professionals that eases their work on analysing Internet Messengers histories. Supports various IMs, has deep ICQ analysing mechanisms.

• License: Shareware
• Language: English
• Release: 2006-06-07
• Size: 1 Mb
• Cost: 39.95 $

ForensicMailArchiver (FMA) creates MSG files from Outlook PST files. It extracts email, contacts, tasks, notes, calendar and journal entries. It operates in batch mode, converting all PST files placed in a user-selected operating system directory. FMA is valuable as a complementary product to a bulk document indexing product such as dtSearch, or as an efficient method to prepare Outlook items for archiving to CD/DVD media.

• License: Shareware
• Language: English
• Release: 2008-03-29
• Size: 2 Mb
• Cost: 99.99 $

Paraben's Case Agent Companion is designed to optimize both the time of the forensic examiner and the agent working a case. Built in viewers for over 225 file formats, searching, and reporting make Case Agent Companion the most comprehensive forensic examination & reporting tool of its kind. Because Case Agent Companion is compatible with Paraben's P2 Examination Technology, your examination will be faster, more efficient, and more effective.

• License: Shareware
• Language: English
• Release: 2005-03-22
• Size: 22 Mb
• Cost: 99.00 $

Designed for computer forensic examiners to help organize and speed up the examination of the contents of a hard drive, Forensic Sorter allows you to sort the contents of entire hard drives into categories such as video, audio, spreadsheets, etc. so you can easily find what you're looking for. Filter out common Windows files, recover deleted files or file fragments in slack, deleted, and unallocated space.

• License: Demo
• Language: English
• Release: 2006-07-19
• Size: 39 Mb
• Cost: 169.00 $

Disk Investigator helps you to discover all that is hidden on your computer hard disk. It can also help you to recover lost data. Display the true drive contents by bypassing the operating system and directly reading the raw drive sectors. View and search raw directories, files, clusters, and system sectors. Undelete previously deleted files. Verify the effectiveness of file and disk wiping programs.

• License: Freeware
• Language: English
• Release: 2006-05-06
• Size: 347 Kb
• Cost: Free

Chatting online is not just a passing phase. More and more people are communicating through chat. And that means loads of digital evidence. As an examiner, you need a specialized tool to perform a thorough analysis of chat logs. Paraben's Chat Examiner is another specialized component of Paraben's P2 Forensic Collection that adds one more powerful program to your toolkit. Supports ICQ, Yahoo, MSN, Trilliann, Hello, Skype, or Miranda.

• License: Shareware
• Language: English
• Release: 2005-03-22
• Size: 8 Mb
• Cost: 99.00 $

Forensically examine & analyze over 13 e-mail archives. Complete a comprehensive computer forensic examination of active and deleted e-mail. Examine Outlook Exchange, Eudora, Netscape Messenger, AOL, Pegasus Mail, Outlook Express, The Bat!, Forte Agent, PocoMail, Calypso, FoxMail, Juno 3.x, EML message files, Generic mailboxes (mbox, Berkeley mail format, BSD mail format, Unix mail format). Convert to PST.

• License: Demo
• Language: English
• Release: 2002-05-02
• Size: 2 Mb
• Cost: 199.00 $

A lot of different information about a user's activity is kept within the personal computer. Usually the user does not know about its existence. TotalRecall is a free forensic analysis tools to reconstruct Internet Explorer and user's activity. TotalRecall investigates: MS IE activity, MS IE history, MS IE cookie, MS IE favorites and some user's activity (recent files and folders, not erased temporary files).

• License: Freeware
• Language: English
• Release: 2007-01-18
• Size: 1 Mb
• Cost: Free

Windows registry files can have thousands upon thousands of entries. Viewing, analyzing, and reporting on these files can be a daunting task. Registry Analyzer is a comprehensive computer forensic analysis tool for analyzing Windows registry entries. FEATURES: Compatible with Paraben's P2 Examination Technology. Hash value verification: MD5, MD4, & SHA1. Load multiple registries. Bookmarking. Advanced searching options. Reporting & more.

• License: Demo
• Language: English
• Release: 2006-03-15
• Size: 6 Mb
• Cost: 129.00 $

Protected Storage Explorer is a powerful tool that allows you to view all sorts of saved data from the Protected Storage Service, including passwords for e-mail accounts in Microsoft Outlook, Microsoft Outlook Express, MSN Messenger, saved Internet Explorer form data (phone numbers, credit card numbers, web email, search engine queries…), user names and passwords on Web pages, and cached logon credentials of sites that require authentication.

• License: Freeware
• Language: English
• Release: 2002-12-08
• Size: 48 Kb
• Cost: Free

Whether you're a computer forensic professional or you just want to investigate what web sites someone has been visiting, the Web Cache Illuminator makes the task much easier. Just point and click to the web cache folder and it will create a meaningful list that not only displays all the file names in the cache; but, more importantly, displays the title given by the web page's creator. You can also delete cache folders or just select files.

• License: Shareware
• Language: English
• Release: 2006-10-28
• Size: 591 Kb
• Cost: 14.95 $

Alien Registry Viewer is similar to the RegEdit application included into Windows, but unlike RegEdit, it works with standalone registry files. While RegEdit shows the contents of the system registry, Alien Registry Viewer works with registry files copied from other computers. Alien Registry Viewer can be extremely useful for system administration and forensic computer examination purposes.

• License: Demo
• Language: English
• Release: 2006-04-22
• Size: 325 Kb
• Cost: 69.00 $

Delete your sensitive files permanently. Mutilate File Wiper is a file remover that prevents recovery of deleted files from your hard drive by data recovery or forensic software. Choose one of three security levels or configure a customizable level for up to 297 overwrites. Mutilate supports complete folder and subfolder shredding. With Mutilate's disk free space wiper, you can even use Mutilate to permanently erase previously deleted files.

• License: Shareware
• Language: English
• Release: 2005-05-23
• Size: 823 Kb
• Cost: 20.00 $

Visual IP Trace helps identify hackers, validate websites, and investigate IP addresses. Trace analysis reports provide detailed information including the estimated physical location, network provider and worldwide whois information. The analysis reports enable users to verify a website prior to submitting confidential information, trace a hacker or suspect to their location, and report Internet abuse or illegal activity.

• License: Shareware
• Language: English
• Release: 2006-04-13
• Size: 3 Mb
• Cost: 39.95 $

Red Light | Green Light determines the extent to which a computer has been used to access pornography-based Internet web sites. RLGL is not Internet web site blocking software nor is it a friend of anyone using a computer for illicit purposes. RLGL identifies illicit computer use. It is designed with parents, schools, libraries, employers, law enforcement -any individual concerned about improper computer use.

• License: Shareware
• Language: English
• Release: 2006-06-22
• Size: 3 Mb
• Cost: 24.95 $

Thumbs.db Viewer displays Thumbs.db database records as well as the miniature graphics contained in each (with the original file name and timestamp); collects all the Thumbs.db files in and below the specified folder; searches the Recycle Bin (INFO2 files) for deleted Thumbs.db files; extract and view pictures as an HTML representation; using a heuristic algorithm, the program can search swap and hibernation files for JPG graphic files.

• License: Shareware
• Language: English, German
• Release: 2007-08-20
• Size: 1 Mb
• Cost: 15.00 $

Recovery software restores missing FAT12 FAT16 FAT32 VFAT format partition file systems. FAT partition recovery software recover hard disk drive data files folders like outlook express MBX DBX files acrobat PDF Microsoft Office Word *.doc, Access *.MDB, PowerPoint *.PPT files and mp3, mp4, DAT, MPEG, MPG, MOV, MIDI audio video movies and corrupted pictures like Jpg GIF, PNG, RIFF and PSD compressed and encrypted data support all windows OS.

• License: Shareware
• Language: English
• Release: 2005-12-09
• Size: 5 Mb
• Cost: 69.00 $