Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Sherlock Forensics Recover is a powerful Windows desktop application that allows users to explore drives and disk images, generate forensic images, and restore deleted files. Compatible with Windows 10 and 11, it supports a variety of file systems including FAT32, NTFS, exFAT, APFS, HFS+, ext, XFS, Btrfs, and ZFS. Users can conduct both quick and comprehensive scans, featuring signature-based carving, lost-partition recovery, and RAID reconstruction capabilities. The software identifies results using file metadata, signature location, or assumptions, and it flags files that are likely to have been overwritten. Additionally, it generates self-contained offline HTML reports, records SHA-256 hashes, and ensures that the source drive remains unaltered during operations. A free version is offered, while the Pro version, available for a one-time fee of $295, includes enhanced recovery features and the ability to analyze pagefiles for URLs, paths, IP addresses, and credentials. This tool is specifically designed for use by forensic examiners, IT professionals, and specialists in data recovery. Furthermore, the installation package is EV-signed and verified with SHA-256, ensuring a secure setup process. Its robust capabilities make it a reliable choice for anyone needing in-depth forensic analysis.
Description
Sherlock Forensics iPhone and iPad Analyzer is a Windows application designed for the acquisition and analysis of evidence from iPhones and iPads using logical MobileBackup2 backups. In addition to this, it is capable of examining full-filesystem extractions from Cellebrite UFED and Inseyets, which are produced by various acquisition tools. The software operates entirely offline, ensuring that it does not alter any evidence during the process. It has the ability to decrypt encrypted backups and presents data in over 200 searchable views for various types of information, including messages, calls, contacts, Safari browsing history, Apple Notes, Maps data, and more. The free version allows users to preview up to 25% of each artifact view, limited to 100 rows. The Forensic Edition, however, provides unlimited access to data, enables global searches, supports CSV and JSON exports, generates court-ready HTML reports, includes a raw SQLite browser, facilitates file extraction, and allows for screen captures. Furthermore, it can identify and flag deleted records that are retrieved from the analyzed data. This tool is utilized by a variety of professionals including digital forensic examiners, investigators, law enforcement personnel, legal teams, and forensic laboratories that are tasked with the review and documentation of mobile device evidence. Ultimately, the Sherlock Forensics Analyzer serves as an essential resource for ensuring thorough and accurate mobile forensic investigations.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
Cellebrite
No
Pricing Details
$0
Free edition: browse, preview, export files, and create raw or E01 disk images. Pro is a $295 one-time purchase with no subscription; it adds deleted-file recovery, unallocated-space carving, RAID reconstruction, lost-partition search, and recovery of previous Windows versions.
Free Trial
No
Free Version
Yes
Pricing Details
$599 one-time
The free edition previews a portion of the available artifacts. The Forensic Edition is a one-time $599 USD license and adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, raw SQLite browsing, and file extraction.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Sherlock Forensics
Founded
2006
Country
Canada
Website
www.sherlockforensics.com/data-recovery-software
Vendor Details
Company Name
Sherlock Forensics
Founded
2006
Country
Canada
Website
www.sherlockforensics.com/pages/sherlock-forensic-iphone-analyzer.html
Product Features
Data Recovery
Web Access / Restoration
No
Backup Log
No
Backup Scheduling
No
Compression
No
Continuous Backup
No
Encryption
No
Incremental Backup
No
Local Server Options
No
Multiple System Support
No
Remote Server Options
No
Secure Data Storage
No