P2 Command Kit+

Paraben's P2 Examination Process is an alternative way of thinking in computer forensics. P2 works hand-in-hand with the Paraben forensic tool line. P2 Examination Technology centers around P2 Commander and includes other specialized tools, each taking a different role in the examination. In the flow chart, you can see how each tool lessens the work-load by distributing the examination amongst different specialized tools. This allows for more data to be processed in less time.

The process is simple. Complete a bit-stream image using Forensic Replicator or other supported imaging software and then begin the "divide and conquer" concept. P2 Commander is the powerhouse behind the P2 Paradigm. Starting with indexing evidence, P2 Commander's Firebird database allows for faster searching and vast amounts of data to be processed in a single case. The indexing uses the forensic sorting engine to categorized the data into different preassigned categories as seen on the chart. One of those categories is FOCH - Filter Out Common Hashes. This process can eliminate 20-30% of the drive data to known files, saving hours of time for the examiner. P2 Commander also has engines for advanced analysis of e-mail (including network e-mail stores), chat logs, and supports file viewers for over 225 common file types. The P2 Command kit includes software that focuses on other areas of an examination as well. P2 eXplorer allows you to virtually mount images as drives while protecting the image from being altered. Decryption Collection is an advanced password recovery suite. To analyze Windows registry files the Command Kit includes Registry Analyzer. Finally, Case Agent Comanion has complete analysis, bookmarking, & note taking functions built in for a final report to be generated and a case to be closed.

Programs that make up the P2 Command Kit+ include:

• P2 Commander
• Forensic Replicator
• P2 eXplorer
• Decryption Collection Enterprise
• Registry Analyzer
• Case Agent Companion
• Plus, you get a one year subscription for all these products.