Tools we use for 
Computer Forensics Investigation

Image Capture

We use ICS Image Masster forensic duplication systems for image acquisition. As an extra precaution, we use the ICS Image Masster Drive Lock hardware write blocker to prevent data from being written to the evidence source drive.  Because our ICS image acquisition tools are designed for portability, we can take our forensic lab to where the evidence is. Experience has shown that courts are more willing to grant access to digital evidence when the acquisition process is done onsite with a minimum amount of system down time.  ICS products are the state of the art in computer forensics acquisition.  We also use Digital Intelligence Firefly write protection devices to capture images from SATA and SCSI hard drives.

ICS Image MASSter Solo

ICS Image MASSter 550i

  ICS Drive Lock

Forensic Examination

We use Access Data Corporation's Forensic Tool Kit (FTK) and Password Recovery Tool Kit (PRTK) for all our forensic examinations.   Access Data has the best forensic tools on the market.  They allow much faster and more thorough examination than any other forensics analysis software product.  We are able to complete our examinations in hours, not days, as was the case with previous forensics tools. 

Access Data Corp. FTK
Access Data Corp. PRTK
Access Data Corp. DNA

ABRAMS COMPUTER FORENSICS
P.O. Box 305, Sullivans Island, SC 29482  
1-(866)-433-4969
www.AbramsForensics.com

 © 2008 by Abrams Computer Forensics

 

 

Return to main page