Forensic Software R...
 
Notifications
Clear all

Forensic Software Recommendation

10 Posts
6 Users
0 Likes
740 Views
(@bell_4)
Posts: 10
Active Member
Topic starter
 

Hello, we are looking for a product that supports Windows 10 systems. The product would need to be able to capture a forensic image over the network and have the capabilities to do forensic analysis on the image file. Please let me know if more information is needed. Thanks in advanced for the recommendations.

 
Posted : 10/05/2019 6:18 pm
(@bell_4)
Posts: 10
Active Member
Topic starter
 

Bump D D

 
Posted : 13/05/2019 7:29 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

I have no association directly nor indirectly with Passmark, but Passmark's OSForensics tool should meet your requirements

https://www.osforensics.com/faqs-and-tutorials/imaging-a-network-location.html

 
Posted : 13/05/2019 10:32 pm
(@bell_4)
Posts: 10
Active Member
Topic starter
 

I will check them out. Thank you!

 
Posted : 13/05/2019 10:38 pm
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

Hello, we are looking for a product that supports Windows 10 systems. The product would need to be able to capture a forensic image over the network and have the capabilities to do forensic analysis on the image file. Please let me know if more information is needed. Thanks in advanced for the recommendations.

Belkasoft can do it.

 
Posted : 14/05/2019 3:19 am
(@belkasoft)
Posts: 169
Estimable Member
 

Hello, we are looking for a product that supports Windows 10 systems. The product would need to be able to capture a forensic image over the network and have the capabilities to do forensic analysis on the image file. Please let me know if more information is needed. Thanks in advanced for the recommendations.

Belkasoft can do it.

Indeed, with v.9.5 Belkasoft Evidence Center supports remote acquisition. Win 10 and image analysis are supported for a long time already.

Feel free to request a trial at https://belkasoft.com/trial

 
Posted : 14/05/2019 6:06 am
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
 

Indeed, with v.9.5 Belkasoft Evidence Center supports remote acquisition. Win 10 and image analysis are supported for a long time already.

With or without the prior installation of an agent that might require a reboot?

 
Posted : 14/05/2019 7:31 am
(@belkasoft)
Posts: 169
Estimable Member
 

Indeed, with v.9.5 Belkasoft Evidence Center supports remote acquisition. Win 10 and image analysis are supported for a long time already.

With or without the prior installation of an agent that might require a reboot?

The agent does not have to be installed (it is portable). It should be only run - no reboot will be required.

 
Posted : 14/05/2019 9:27 am
(@hommy0)
Posts: 98
Trusted Member
 

EnCase 8 can also be used to preview and acquire across a network connection.

If you use the direct agent (tools > Create Direct Agent), and place it onto a USB thumb drive, it can be launched directly from an administrator command prompt (no reboot should be required) on the target system.

You may need to place an exception in any firewall (or disable the firewall).

Regards

 
Posted : 14/05/2019 12:58 pm
(@bell_4)
Posts: 10
Active Member
Topic starter
 

Thanks all very much!! I will reach out to each vendor to learn more and get a quote.

 
Posted : 14/05/2019 2:32 pm
Share: