Forensic Explorer (GetData)
About Forensic Explorer (GetData)
Powerful and intuitive computer forensics tool for analyzing evidence from physical disks and forensic images. Supports software and hardware RAID reconstruction including JBOD, RAID 0, and RAID 5. Sector-level keyword search with RegEx and DTSearch index technology. Data carving for 300+ known file types with scriptable custom carvers. Automatic file signature verification identifies mismatched extensions. Accessible GUI for new investigators with advanced scripting for automation.
Why Notable
Strong RAID reconstruction; DTSearch indexing; 300+ file type carving
