MacForensicsLab 2.0 review

MacForensicsLab is a complete suite of forensics and analysis tool in one cohesive package.

License: Demo OS: Mac OS X File size: 12556K Developer: SubRosaSoft.com LLC Buy Now Price: $995.00 Updated: 11 Jan 2007

0

MacForensicsLab is a complete suite of forensics and analysis tool in one cohesive package. Combining the power of many individual functions into one application in order to provide a single solution for law enforcement professionals.

Bulletin Board:
http://macforensicslab.com/bulletinboard/

Here are some key features of "MacForensicsLab":
Explore files, folders, and devices
Extensive detailed logs
Industrial strength device imaging
In depth catalogs traversing directories
Keyword searching and analysis
File salvaging and extraction
Disk arbitration and management.

What's New:
The newest MacForensicsLab contains the enhanced ability to bookmark files, now allowing the investigator to do so from multiple windows (the main window, catalog window, analyze window, etc).
It also contains a completely new file browser feature entitled “Browse” that allows investigators to view the content from an entire directory structure in an easy-to-use window. Where file handlers exist, the investigator can preview the file, so pictures, movies, audio files, as well as many other file types become immediately accessible and viewable to the investigator in one go. These can then be bookmarked very easily for later reference.
Bookmarks must now also be categorized. Wherever files are bookmarked the investigator must assign them to a category so that the bookmarks can then be collectively referred to later on in the investigation from the bookmarks log.
The salvage process now contains the ability to resume if halted as a result of a lack of available space. Moreover, the salvage window itself has been enhanced and investigators can much more easily target and salvage specific file types, speeding up the process of salvaging the necessary files.
Added to the logs window is the ability for the investigator to export a report in HTML format. The result is an auto-generated report combining case details, user inputted generation control parameters and log data that can easily be shared across a departmental intranet or extranet.
Last but not least, MacForensicsLab is now available on a dual boot DVD so that investigators can boot both PowerPC and Intel chip based Macintosh systems quickly and easily.