Introduction

Blade® is a Windows-based, advanced professional forensic data recovery solution designed by Digital Detective.  It supports professional module plug-ins which give it advanced data recovery and analysis capabilities as well as Intelli-Carve® technology for accurate data recovery and validation.  Blade supports all of the major forensic image formats and is more than just a data recovery tool.  The professional modules have in-built validation and interpretation routines to assist with accurate data recovery.  Some of the standard profiles also have Intelli-Carve® validated routines (such as the JPEG recovery module).

The software has been designed for extremely fast/accurate forensic data recovery.  Not only is it highly effective in the pre-analysis stage of a forensic examination, it can be quickly configured to recover bespoke data formats.  It has specifically been written for the field of Digital Forensics.

What does it do?

Blade can:

• Processes supported bit-stream for Browser artefacts
• Recover deleted records and files
• Native support for Expert Witness E01 image files
• Native support for Advanced Forensic Format (AFF)
• Native support for sector level processing of:
  • Physical devices (such as hard disks)
  • Logical devices (such as hard disk volumes or removable device)
• Memory dumps
• Export data in a format that can be imported into NetAnalysis for forensic review / analysis

Sources of Evidence

Blade can recover data from a number of different file system artefacts such as:

Blade uses an overlap process when reading a source to ensure that data is recovered on block boundaries.