Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Sherlock Forensics Disk Imager is a specialized Windows application designed for the creation of forensic images from physical drives to assist in the acquisition of digital evidence. It generates raw DD images along with segmented files and EWF E01 formats, which are compatible with various forensic analysis applications. The tool meticulously documents case information, evidence details, and examiner data within a manifest and E01 metadata, while also calculating SHA-256 hashes and providing support for SHA-1 and MD5. Its verification process involves reading both the source drive and the completed image to ensure data integrity; other features include logging bad sectors, a console for live acquisitions, and a protective measure to prevent images from being saved back to the original drive. Aimed at professionals such as digital forensic examiners, law enforcement officials, incident response teams, and corporate investigators, it accommodates both dead-disk and live-acquisition processes on 64-bit versions of Windows 10 and 11. The application operates as a standalone executable, allowing it to function without the need for an installation or additional runtime dependencies, ensuring ease of use for its users. With its robust set of features, it stands out as a vital tool for those involved in the field of digital forensics.

Description

Sherlock Forensics iPhone and iPad Analyzer is a Windows application designed for the acquisition and analysis of evidence from iPhones and iPads using logical MobileBackup2 backups. In addition to this, it is capable of examining full-filesystem extractions from Cellebrite UFED and Inseyets, which are produced by various acquisition tools. The software operates entirely offline, ensuring that it does not alter any evidence during the process. It has the ability to decrypt encrypted backups and presents data in over 200 searchable views for various types of information, including messages, calls, contacts, Safari browsing history, Apple Notes, Maps data, and more. The free version allows users to preview up to 25% of each artifact view, limited to 100 rows. The Forensic Edition, however, provides unlimited access to data, enables global searches, supports CSV and JSON exports, generates court-ready HTML reports, includes a raw SQLite browser, facilitates file extraction, and allows for screen captures. Furthermore, it can identify and flag deleted records that are retrieved from the analyzed data. This tool is utilized by a variety of professionals including digital forensic examiners, investigators, law enforcement personnel, legal teams, and forensic laboratories that are tasked with the review and documentation of mobile device evidence. Ultimately, the Sherlock Forensics Analyzer serves as an essential resource for ensuring thorough and accurate mobile forensic investigations.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

No images available

Screenshots View All

Integrations

Cellebrite No 

Integrations

Cellebrite Yes 

Pricing Details

$0
Free to download and use, with no trial period, feature restrictions or license fee.
Free Trial No 
Free Version Yes 

Pricing Details

$599 one-time
The free edition previews a portion of the available artifacts. The Forensic Edition is a one-time $599 USD license and adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, raw SQLite browsing, and file extraction.
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Sherlock Forensics

Founded

2006

Country

Canada

Website

www.sherlockforensics.com/pages/sherlock-disk-imager.html

Vendor Details

Company Name

Sherlock Forensics

Founded

2006

Country

Canada

Website

www.sherlockforensics.com/pages/sherlock-forensic-iphone-analyzer.html

Product Features

Disk Imaging

Backup Scheduling No 
Bare-Metal Restore No 
Compression No 
Differential Backup No 
Disk Cloning No 
Encryption No 
Image Deployment No 
Incremental Backup No 
Web Access / Restoration No 

Product Features

Alternatives

Sherlock Forensics Recover Reviews

Sherlock Forensics Recover

Sherlock Forensics

Alternatives

Belkasoft X Reviews

Belkasoft X

Belkasoft
Android Acquirer Reviews

Android Acquirer

Sherlock Forensics
XRY Reviews

XRY

MSAB
Android Acquirer Reviews

Android Acquirer

Sherlock Forensics