Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Sherlock Forensics Recover is a powerful Windows desktop application that allows users to explore drives and disk images, generate forensic images, and restore deleted files. Compatible with Windows 10 and 11, it supports a variety of file systems including FAT32, NTFS, exFAT, APFS, HFS+, ext, XFS, Btrfs, and ZFS. Users can conduct both quick and comprehensive scans, featuring signature-based carving, lost-partition recovery, and RAID reconstruction capabilities. The software identifies results using file metadata, signature location, or assumptions, and it flags files that are likely to have been overwritten. Additionally, it generates self-contained offline HTML reports, records SHA-256 hashes, and ensures that the source drive remains unaltered during operations. A free version is offered, while the Pro version, available for a one-time fee of $295, includes enhanced recovery features and the ability to analyze pagefiles for URLs, paths, IP addresses, and credentials. This tool is specifically designed for use by forensic examiners, IT professionals, and specialists in data recovery. Furthermore, the installation package is EV-signed and verified with SHA-256, ensuring a secure setup process. Its robust capabilities make it a reliable choice for anyone needing in-depth forensic analysis.

Description

Sherlock Forensics iPhone and iPad Analyzer is a Windows application designed for the acquisition and analysis of evidence from iPhones and iPads using logical MobileBackup2 backups. In addition to this, it is capable of examining full-filesystem extractions from Cellebrite UFED and Inseyets, which are produced by various acquisition tools. The software operates entirely offline, ensuring that it does not alter any evidence during the process. It has the ability to decrypt encrypted backups and presents data in over 200 searchable views for various types of information, including messages, calls, contacts, Safari browsing history, Apple Notes, Maps data, and more. The free version allows users to preview up to 25% of each artifact view, limited to 100 rows. The Forensic Edition, however, provides unlimited access to data, enables global searches, supports CSV and JSON exports, generates court-ready HTML reports, includes a raw SQLite browser, facilitates file extraction, and allows for screen captures. Furthermore, it can identify and flag deleted records that are retrieved from the analyzed data. This tool is utilized by a variety of professionals including digital forensic examiners, investigators, law enforcement personnel, legal teams, and forensic laboratories that are tasked with the review and documentation of mobile device evidence. Ultimately, the Sherlock Forensics Analyzer serves as an essential resource for ensuring thorough and accurate mobile forensic investigations.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

No images available

Screenshots View All

Integrations

Cellebrite No 

Integrations

Cellebrite Yes 

Pricing Details

$0
Free edition: browse, preview, export files, and create raw or E01 disk images. Pro is a $295 one-time purchase with no subscription; it adds deleted-file recovery, unallocated-space carving, RAID reconstruction, lost-partition search, and recovery of previous Windows versions.
Free Trial No 
Free Version Yes 

Pricing Details

$599 one-time
The free edition previews a portion of the available artifacts. The Forensic Edition is a one-time $599 USD license and adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, raw SQLite browsing, and file extraction.
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Sherlock Forensics

Founded

2006

Country

Canada

Website

www.sherlockforensics.com/data-recovery-software

Vendor Details

Company Name

Sherlock Forensics

Founded

2006

Country

Canada

Website

www.sherlockforensics.com/pages/sherlock-forensic-iphone-analyzer.html

Product Features

Data Recovery

Web Access / Restoration No 
Backup Log No 
Backup Scheduling No 
Compression No 
Continuous Backup No 
Encryption No 
Incremental Backup No 
Local Server Options No 
Multiple System Support No 
Remote Server Options No 
Secure Data Storage No 

Product Features

Alternatives

Alternatives

Belkasoft X Reviews

Belkasoft X

Belkasoft
RS Partition Recovery Reviews

RS Partition Recovery

RecoverySoftware
Android Acquirer Reviews

Android Acquirer

Sherlock Forensics
XRY Reviews

XRY

MSAB
Disk Drill Reviews

Disk Drill

508 Software