Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Sherlock Forensics iPhone and iPad Analyzer is a Windows application designed for the acquisition and analysis of evidence from iPhones and iPads using logical MobileBackup2 backups. In addition to this, it is capable of examining full-filesystem extractions from Cellebrite UFED and Inseyets, which are produced by various acquisition tools. The software operates entirely offline, ensuring that it does not alter any evidence during the process. It has the ability to decrypt encrypted backups and presents data in over 200 searchable views for various types of information, including messages, calls, contacts, Safari browsing history, Apple Notes, Maps data, and more. The free version allows users to preview up to 25% of each artifact view, limited to 100 rows. The Forensic Edition, however, provides unlimited access to data, enables global searches, supports CSV and JSON exports, generates court-ready HTML reports, includes a raw SQLite browser, facilitates file extraction, and allows for screen captures. Furthermore, it can identify and flag deleted records that are retrieved from the analyzed data. This tool is utilized by a variety of professionals including digital forensic examiners, investigators, law enforcement personnel, legal teams, and forensic laboratories that are tasked with the review and documentation of mobile device evidence. Ultimately, the Sherlock Forensics Analyzer serves as an essential resource for ensuring thorough and accurate mobile forensic investigations.
Description
Xplico is a prominent tool featured in many leading digital forensics and penetration testing distributions, including Kali Linux, BackTrack, DEFT, Security Onion, Matriux, BackBox, CERT Forensics Tools, Pentoo, and CERT-Toolkit. It supports simultaneous access for multiple users, allowing each to manage one or several cases effectively. The interface is web-based, and its backend database options include SQLite, MySQL, or PostgreSQL. Additionally, Xplico can function as a Cloud Network Forensic Analysis Tool. Its primary objective is to extract application data from internet traffic captures, such as retrieving emails via protocols like POP, IMAP, and SMTP, along with HTTP content, VoIP calls through SIP, and file transfers using FTP and TFTP from pcap files. Importantly, Xplico is not classified as a network protocol analyzer. As an open-source Network Forensic Analysis Tool (NFAT), it organizes the reassembled data with an associated XML file that distinctly identifies the data flows and the corresponding pcap file. This structured approach enables users to efficiently analyze and manage the data extracted from network traffic.
API Access
Has API
No
API Access
Has API
No
Pricing Details
$599 one-time
The free edition previews a portion of the available artifacts. The Forensic Edition is a one-time $599 USD license and adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, raw SQLite browsing, and file extraction.
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Sherlock Forensics
Founded
2006
Country
Canada
Website
www.sherlockforensics.com/pages/sherlock-forensic-iphone-analyzer.html
Vendor Details
Company Name
Xplico
Founded
2007
Website
www.xplico.org