How to use Desktop Triage to investigate? Capture non-volatile and volatile data on Windows DEMO
Channel: BlockChain Security
Date: 2021-04-27

At first crime scene, preserving evidence with less or no taint has always been the challenge. To solve this problem, our Desktop Triage is here to help. It captures both non-volatile and volatile data on operating Windows, keeping critical evidence such as login account and opened files. If the suspect has had just deleted the files, Desktop Triage could also attempt to retrieve the important data. The feature of screencapture further enforces the capability of preserving first-hand information. Other features, such as OCR and PSR also take a step further towards the competency of evidence.

Contact: service@iforensics.com.tw