Digital forensic imaging for law enforcement and corporate investigations The increasing diversity, size and sophistication…
Detego® Media Acquisition is part of our industry-leading Unified Forensics Platform. Rapid, automated and simple-to-use, this feature-rich forensic acquisition tool can extract data from USB devices and other removable media (such as SD cards, micro SD cards, portable external drives, IDE and SATA drives, CD, DVD, Blu-ray etc.).
It has been adopted by police forces, military, intelligence agencies and large-scale enterprises all over the world and has consistently proven to reduce the burden and subsequent backlog of digital forensic investigations that many crime-fighting units are currently experiencing.
Whether you’re a field-based operative or a lab-based analyst, Detego® Media Acquisition’s intuitive interface can acquire and analyse data from multiple devices in rapid time, allowing you to view the data in ‘real time’ so you can make on the spot decisions.
DELETED FILE CARVING
The Detego® Unified Forensics Platform can identify, and where possible, retrieve deleted files by conducting a low-level binary analysis of a disk partition or file system image.
File carving can be performed on USB devices and other removable media (such as SD cards, micro SD cards, portable external drives etc.) as well as disk image files (DD & EWF). Hash matching of the acquired data can also be done during this process.
VIEW LIVE FILES INTUITIVE INTERFACE
View logical data as it’s streamed ‘live’ into the platform with the Detego® Media Acquisition triaging solution.
A single case can often have multiple exhibits, use our tool to speed up the investigative process by simultaneously forensically imaging and analysing multiple removable devices at once.
RECOVER DELETED DATA
A core benefit of the Detego® platform is thatcarving can be performed on multiple exhibits simultaneously.
‘Plug and play’ with simple options that result in rapid results for both technical and non-technical users.
The Detego® Analyse Viewer provides an easy-to use gallery panel for investigators to examine and apply tags to all acquired data. Media Acquisition also has an inbuilt omni-viewer capable of opening and viewing acquired files, irrespective of the file formats.
Automatically match incoming data against a set of pre-defined keywords, hash lists and other features such as skin and face detection.
Use one single tool to acquire data from multiple types of removable media including SD cards, microSD cards, hard drives, image files and many more.
Define the logical acquisition parameters to extract all files or target individual artefacts such as pictures, videos, documents and emails to decrease investigation times.
FORENSIC IMAGING OPTIONS IN THE DETEGO® PLATFORM
GEO1 Imaging acquires a forensic image of a target drive in the Expert Witness Format (E01) file type, storing file metadata within the actual image. The file can then be compressed for archival purposes, ideal for a busy agency where savings in storage are needed.
DD Imaging acquires a forensic image of a target disk as a raw bit-by-bit copy of the original with the metadata for the collected artefacts being stored in a separate file. Image files saved as raw DD files can’t be compressed.
ADOPTED BY POLICE FORCES, MILITARY, INTELLIGENCE AGENCIES AND LARGE SCALE ENTERPRISES ALL OVER THE WORLD