- All the features of Imager and more.
In addition to all the features of Evimetry Imager, the Advanced Imager provides advanced acquisition techniques enabling prioritised evidence acquisition live analysis. The resulting physical images are still usable in regular forensic tools.
- Complete, live & profile based acquisitions.
Evimetry’s technical advance is the non-linear partial physical forensic image. Acquire the highest-value evidence by category first, widen the scope of acquisition by live analysis via virtual disk, or take a complete image. The choice is yours.
- Allocated only acquistions.
Allocated only acquisitions enable rapid acquisition of all allocated volume and filesystem metadata and content. Useful for acquiring high value content in time critical situations.
- Remote control of acquisition.
Scale to acquiring multiple devices at the same, with centralised control from a single pane.
- Analyse immediately.
Evimetry closes the gap between acquisition and analysis, with examination and triage activities to occurring at the same time as acquisition. Leverage your preferred forensic toolset for live analysis and triage while you acquire, via a virtual disk device view of your live acquisition.