| CyberCheck |
 |
| ::More Features
|
 |
Standard Windows application.
Self Integrity check
Minimum system configuration check.
Analyses FAT12, FAT16, FAT32, NTFS, Linux EXT2FS and CDFS file system evidence files.
User login facilities.
Creates log of each analysis session and Analyzing officer’s details.
Block by block data integrity verification while loading evidence file.
Explorer type view of contents of the whole evidence file.
Display of folders and files with all attributes.
Show/Hide system files.
Text/Hex view of the content of a file.
Picture view of an image file.
Gallery view of images.
Graphical representation of the following views of an evidence file.
Disk View
Cluster View
Block View
Timeline View of
All files
Deleted files
Time anomaly files
Signature Mismatched files
Files created within a time frame
Single and Multiple Keyword search.
Search with GREP expressions.
Extraction of Disk, Partition, File and MBR Slacks.
Exclusive search in slack space.
Data recovery from deleted files and slack space.
Exporting files, folders and slack content.
Exporting folder structure including file names into a file.
Exporting files on to an external viewer.
Extraction of unused unallocated clusters and exclusion from search space.
Extraction of lost clusters.
Exclusive search in data extracted from lost clusters.
Exporting Swap files.
Exclusive search in data extracted from Swap files.
File search based on extension.
Exclusion of system files from search space.
Local and Network preview of storage media
Book marking facility for data, files and folders
Mailbox viewer
Registry viewer
Expansion trigger at different levels of folder structure
Recovery of deleted partitions
Recovery of formatted media
Facility for analyzing raw images
Identification of encrypted & Password protected files
Identification of overwritten files
Unicode support
Indian Language support
Support for dynamic disk analysis
Customized hash set library creation
Support for scripting
Customization of File Signature Library
Facility for viewing nested ZIP file listing
Internet History Viewer
Facility to view metadata of Microsoft office files
Generation of analysis report with the following features.
Complete information of the evidence file system.
Complete information of partition and drive geometry.
Hash verification details.
User login and logout information.
Exported content of text file and slack information.
Includes picture file as image.
Customization of report.
Save report.
Print report
|
|
|
|
Cyber Forensics Analysis Centre set up by CDAC