『Arsenal Recon』
Digital Forensic Suite "Arsenal Recon"
Arsenal Recon is a digital forensic software suite that can thoroughly analyze evidence sources that mainstream tools often overlook, such as disk, memory, registry, and application cache. 【Features】 ■ It includes AIM, which allows you to mount disk images as a complete virtual SCSI disk in Windows. ■ AIM can launch the image as a virtual machine with one click, automatically bypassing Windows login and DPAPI. ■ Hibernation Recon reconstructs active RAM from hibernation files in Windows XP to 11 and extracts up to the slack space. ■ Registry Recon reconstructs historical registries, including deleted fragments and VSC, displaying the changes in keys and values chronologically. ■ HBIN Recon carves hive bin fragments from disk and memory, instantly decoding artifacts such as BAM and Secrets. *For more details, please refer to the related links or feel free to contact us.
- 企業：B7
- 価格：Other
