Belkasoft: Evidence Search and Analysis Software for Digital Forensic Investigations
Tool for forensic professionals that eases their work on analysing Internet Messengers histories, Browsers histories and Outlook mailboxes. Supported Instant Messengers: ICQ versions from 97a up to ICQ 7, MSN Messenger, Yahoo! Messenger, &RQ, Miranda, Skype, MySpace IM, SIM, QIP, QIP Infium, Trillian, AIM. Supported browsers: Microsoft Internet Explorer, Mozilla Firefox, Opera, Google Chrome. Supported Outlook versions: 2003, 2007, Outlook Express.
No password required. No need to be logged as a history owner. No need to have messenger/browser/mail software installed. No need to have write access to a disk.
Search is supported – simple search by word or phrase and advanced search using file with suspect word or using regular expression which is very useful when searching a various word’s forms or phrase with fuzzy structure.
The product can search installed messengers and history files on your computer as well as on mapped network drives (including Encase mapped drives). Thus you will find history files even in case you have no installed messenger.
It is possible to work with several histories at a time. Per-session bookmarks are supported.
Belkasoft Forensic Studio allows you to extract analyzed history into such formats as plain text, HTML and XML.