HstEx® is able to extract browser records directly from source forensic files enabling the recovery of evidence, not only from unallocated clusters, but also from cluster slack, memory dumps, paging files and system restore points amongst others. It is an extremely powerful tool in your forensic tool-box.
From a forensic perspective, it is important that HstEx® is used in combination with NetAnalysis®.
Search this documentation
|Content by Label|
Recently Updated Pages