Forensics Tools

What's My Computer Doing? shows all programs (with details!), that are accessing your hard disk or using the CPU. Furthermore you have the option to close these programs or even uninstall them. It's a software utility that is able to reveal important data about the applications that are currently running on your computer. Moreover, you can directly access the program’s properties from the primary panel, open the saving directory, close or uninstall the selected application.

Volatility Workbench Portable Software is a graphical user interface (GUI) for the Volatility tool. Volatility is a command line memory analysis and forensics tool for extracting artifacts from memory dumps. Volatility Workbench is free, open source and runs in Windows. It provides a number of advantages over the command line version including.

Tipard Windows Password Reset portable is the professional tool for recovering the password of Windows computer. Whether you lost or forget the password incautiously, you can easily reset the password on all Windows computer including Windows 7/8/10. In addition, this software provides two simple solutions for you to reset your Windows password within clicks.

File Date Corrector Portable– Correct ‘Date Created’ and ‘Date Modified’ and Restore Original Creation Date. You set up your new computer and all imported files on your new hard disk have now a wrong “Date Created”? Or you copied all your vacation photos from your digital camera or your smartphone to your computer and you have discovered that the “Date Created” of all pictures is the date of copying?

X-Ways Forensics  Portable is an advanced work environment for computer forensic examiners and our flagship product. Compared to its competitors, X-Ways Forensics is more efficient to use after a while, by far not as resource-hungry, often runs much faster, finds deleted files and search hits that the competitors will miss, offers many features that the others lack, as a German product is potentially more trustworthy, comes at a fraction of the cost, does not have any ridiculous hardware requirements, does not depend on…

PassFab for Office Portable is an all-in-one password recovery tool that can instantly recover or reset passwords for Word (*.doc, *.docx) documents, Excel (*.xls, *.xlsx) documents and PowerPoint (*.ppt, *.pptx) documents files ,etc.  A Comprehensive Solution to Recover Lost or Forgotten Passwords of Word, Excel, PPT, Outlook Documents in An Easy Way.Instant access to password-protected documents in Microsoft Office suite (Word, Excel, PPT, Outlook, etc).

DataNumen Disk Image Portable is a user-friendly and easy to handle piece of software whose main function consists of helping you creating disk or drive clones, enabling you to use them as a data recovery source, should your system fail or crash. DataNumen Disk Image is a powerful tool to clone and restore disks or drives. It can create and restore the disk image or drive image byte by byte. Useful for data backup & recovery, disk/drive copy & cloning, and forensic.

File Investigator Tools Portable - reliable, fast, and accurate computer forensic tools. We've merged our File Investigator technology with Windows File Find and the DOS Directory command, to search for files by their File Type, Contents, Operating System/Platform, Data Storage Method, File Attributes, plus more. Forget using file extensions, now you can search for files intelligently and browse through their metadata. File Investigator TOOLS (FI TOOLS) includes both FI File Find and FI Directory applications, which identify…

Up to 40% of support calls are related to forgotten passwords and locked logins. Elcomsoft System Recovery helps instantly reset Windows system passwords, enabling system administrators regain access to locked Windows accounts. Supporting local Windows accounts, network domains and Microsoft Account, Elcomsoft System Recovery is a must-have tool for network administrators, IT professionals and security specialists.

FINALMobile Forensics Portable offers the most advanced data-carving tool for our forensic community. With our extensive knowledge of file systems and data patterns, FINALMobile can turn raw data into easy-to-understand data with a few simple clicks. Mobile devices store data in specific formats, and in many cases, the data is not erased. By searching for specific patterns, these hidden gems, “deleted entires,” are recoverable, along with the full scope of the “live” data.