CyberCheck is a cyber forensics tool for data recovery and analysis of digital evidence. CyberCheck uses images created by TrueBack, Encase or raw images.
The tool has a very simple to use GUI which can be used by a novice user. CyberCheck can generate a detailed report on the analysis findings which is very handy for the investigating officers to submit before the court of law. The tool can extract unallocated and disk slack areas and provides options to do analysis based on file hashes and file’s signature.
File Systems supported by CyberCheck includes FAT12/16/32, NTFS, Linux EXT2/2/4 FS, UFS, CDFS, Sun Solaris, Reiser FS, Unix and MAC. CyberCheck can recover deleted files/folders, deleted partitions and formatted data on a partition. There is a powerful search facility- Keyword search, GREP search, file search based on hash values and Unicode search.
Main Features:
- Cost-effective Cyber Forensics solution
- All features for analysis of digital evidence
- Available on Windows 2000/XP platforms
- Unicode and Indian Language support
- Recovers data from deleted files, re-formatted or re-partitioned storage media
- Recovers data from unallocated clusters, lost clusters, file/partition/disk/MBR slack, swap files
- Supports FAT12/16/32, NTFS, EXT2FS, EXT3FS, UFS
- Multiple keyword and GREP search
- Time-line analysis of normal, deleted and signature mismatched files
- Mailbox, Registry and Internet History viewers
- Bookmarking on selected data, files and folders
- Facility to restore image to physical media
- Disk Imaging facility with compression for any media
- Preview support for disks and partitions
- File Data Carving from ambient space
- Picture, Gallery, Timeline and Text/Hex views
- Integrated Mailbox, Internet History and Registry viewers
- Scripting support for automated analysis
- Anti-forensics tools and activities detections
- Steganography file detection and extraction of hidden messages
- Unicode and Indian Language support
- Report generation
Download the trail version of CyberCheck Suite.