Skip to end of metadata
Go to start of metadata

End of Support Notice

This product has been retired and is no longer under active development. The software has been replaced by HstEx® v4, which is a brand new state-of-the-art application which offers significant improvements over existing applications and methodologies. We will cease providing support for HstEx® v3.x on 30th September 2015.


HstEx® is an advanced, Windows-based, multi-threaded, forensic data recovery solution which has been designed to recover deleted browser history and cache data from a variety of source forensic evidence files as well as physical and logical devices. 

Specifically designed to work in conjunction with NetAnalysis® (and is provided as part of the suite), this powerful software can recover deleted data from a variety of Internet browsers, whether they have been installed on Windows, Linux or Apple Mac systems. 

HstEx® supports a number of different source evidence types such as EnCase® e01 (Expert Witness) image files, AccessData® FTK™ Image files or traditional monolithic and segmented dd image files.  It also supports direct sector access to physical and logical devices such as hard disks.  HstEx® is able to extract browser history and cache records directly from source forensic files enabling the recovery of evidence, not only from unallocated clusters, but also from cluster slack, memory dumps, paging files and system restore points amongst others.  It is an extremely powerful tool in your forensic tool-box.


Blog Posts

Recently Updated

Navigate HstEx® Documentation