Belkasoft
Belkasoft Evidence Center 2017
Belkasoft Evidence Center is an all-in-one forensic solution for acquiring, locating, extracting, and analyzing digital evidence stored inside computers and mobile devices.
Belkasoft Evidence Center makes it easy for an investigator to acquire, search, analyze, store and share digital evidence found inside computer and mobile devices. The toolkit will quickly extract digital evidence from multiple sources by analyzing hard drives, drive images, memory dumps, iOS, Blackberry and Android backups, UFED, JTAG and chip-off dumps. Evidence Center will automatically analyze the data source and lay out the most forensically important artifacts for investigator to review, examine more closely or add to report.
Comprehensive examination
Discovers more than 700 types of artifacts, including over 100 mobile applications, all major document formats, browsers, email clients, dozens of picture and video formats, instant messengers, social networks, system and registry files, P2P and file transfer tools, etc. Extracts data from all major operating systems, both computer and mobile: Windows, Linux, MacOS X, iOS, Android, Windows Phone, Blackberry.
Less missed evidence
Looks for hidden and encrypted information, searches in unusual places, carves deleted and damaged data and examines files in little-known formats to discover more evidence than ever. The search includes unallocated and slack space, $MFT, $Log, Volume Shadow Copy and other special and little known areas of operating systems.
Blazing fast operation
The product allows you to perform evidence search faster than most tools as it does not index every single file found on the data source, instead searching for the most forensically significant types of artifacts. Efficient usage of СPU adds to speediness of processing, as does the code written by our team of highly qualified specialists in data analysis.
Fair price
Belkasoft Evidence Center offers the broadest set of tools and features for its price compared to other forensic software. All major analytical capabilities are present even in the most affordable versions of the product. Upgrades to your license can be purchased separately with no extra charges.
Flexible licensing. Usable in the field
The most affordable license is designed to run just on one computer. Floating license is the definition of “value for money” – one license that comes with a USB dongle and allows to run the product on multiple machines. Portable edition can be plugged into any PC, laptop or desktop, with no installation or configuration required.
Belkasoft Acquisition Tool
Belkasoft Acquisition Tool (or BelkaImager) allows you to make images of hard and removable drives, Android and iOS devices, and download Cloud data.
Belkasoft Acquisition Tool helps investigators to complete one of the most important steps of investigation: obtaining data from a data source. Four types of data sources are currently supported:
• Hard or removable drives
• Mobile devices
• Computer RAM memory
• Cloud data
The acquired image can be then analyzed with Belkasoft Evidence Center or any third-party tool.
Hard and removable drive imaging
BelkaImager can acquire hard drives, SSD drives and removable drives connected to your computer, laptop or tablet. The drive can be acquired as DD or E01 image. Physical acquisition is performed.
Mobile device acquisition
The product acquires data from Android and iOS devices (iPhones, iPads), including iOS 10. Logical image is acquired.
RAM capturing
RAM memory of a running Windows computer, laptop or tablet can be dumped in a raw format.
Cloud data downloading
BelkaImager can download data from most important clouds such as iCloud, Google Drive and Google Plus.
Software Sources Ltd. is serving as Belkasoft Reseller.