Case Qualification Tool for Investigators & Digital Forensic Examiners

Triage-lab™ is a Windows based digital forensic tool that performs automated analysis of drive images, network drives, stand alone suspect computers, DVD’s, CD’s, and other digital media.

This solution has been vital in reducing the frustrations of digital forensic examiners and investigators, both victims of the growing backlogs that exist in today’s digital forensic labs. This has resulted in tremendous savings of time, money and resources.

Key Features of Triage-Lab™ Digital Forensic Tool

Data Discovery

• Analyze all files including Encase®, FTK™, and dd image drive formats
• Extracts content embedded in PDF and MS Word documents
• Extracts files from zip and tar archives
• Recovers deleted files in unallocated disk space
• Searches unallocated and slack space
• Carves files out of unallocated space
• Analyzes proprietary file formats: Thumbs.db, Outlook Express, Eudora

Photo Image Matching

• Includes exact, altered, and “series” matching
• Handles high volumes of image matching – SearchPaks can host several hundred thousand digital image signatures

Network and Live Digital Forensic Analysis

• Performs analysis on computers across a network
• Performs live analysis on suspect computers via crossover cables
• Analyzes DVD’s, CD’s and other media

Text Searches

• Includes general keywords and regular expressions search
• Includes text search in EXIF and IPTC data

Suspect Profile

• Identifies misleading file extensions
• Identifies encrypted files
• Uses filters to narrow down searches

Functional

• Allows users to pause the analysis process and review evidence
• Displays key analysis statistics during scan

Reporting

• Visualizes, sorts and bookmarks discovered evidence
• Exports bookmarks to HTML or CSV reports
• Exports bookmarks to Encase® and FTK™

Find out what Triage-Lab™ Digital Forensic Tools can do for you