Forensic tools for reading tapes from any computer system, discover what you need to know. In order to do forensic analysis on data from a tape, first it is essential to read the tape. Media Merge PC will allow the user to read a tape in any format, and also look at any part of the tape in an unprocessed mode. Often with an investigation, tapes may be obtained, but no knowledge of how they were written. With MMPC, provided a compatible tape drive is available, the raw data may always be read, and the chances are extremely high, that the logical tape format will automatically be detected, and the files restored, just as on the host system.
Tapes are often backups of a complete system.
Forensically, these are extremely valuable as a backup is a snapshot of a system at a fixed point of time. Thus it may contain files that since been changed, or deleted. As an audit tool in any fraud investigation, having old versions of critical files can be very valuable. The program is extremly simple to use, and no knowledge of how the original backup or interchange program is required in order to restore the files. Because Media Merge PC can also read the raw data, on occasions where the tape has become corrupted, it may still be possible to view, or recover information on the tape, that the original backup program would report a 'terminal' error on.