Digital forensic Tools / General Features
Likes 0
Link | OSForensics | ProDiscoverBasic | WinHex | R-Studio | Active@FileRecovery | Active@Undelete | Recuva | Autopsy | FTK imager |
|---|---|---|---|---|---|---|---|---|---|
| Company | PassMark® Software Pty Ltd | Technology Pathways | X-Ways Software Technology AG | R-tools Tecnology | Lsoft Tecnologies | Lsoft Tecnologies | CCleaner | Basis Tecnology | Access Data |
| Website | osforensics.com | prodiscover.com | x-ways.net/... | r-tt.com | lsoft.net | lsoft.net | ccleaner.com/... | sleuthkit.org/... | accessdata.com/... |
| License | Proprietary | Free | Proprietary | Proprietary | Proprietary | Proprietary | Free | Free | Free |
| Platform | Windows Vista, Windows 7, Windows 8/8.1, Windows 10, Windows Server (2000, 2003, 2008, 2012), 32-bit and 64-bit platforms | Windows Vista, Windows 7, Windows 8/8.1, Windows 10, Windows Server (2000, 2003, 2008, 2012), 32-bit and 64-bit platforms | Windows XP, Windows 2003 Server, Windows Vista/Server 2008, Windows 7, Windows 8/8.1/Server 2012, Windows 10/Server 2016. 32-bit and 64-bit. Standard, PE and FE | Windows 10 /8.1/8 /7 /Vista /XP /2000 Windows Server 2019 /2016 /2012 /2008 /2003 | Windows XP Windows Vista Windows Server 2003, 2008, 2008 R2, 2012 Windows 7 Windows 8 Windows PE (embedded Windows recovery environment loaded from CD-ROM or USB disk) | Windows 10 Windows 8 Windows 7 Windows Vista Windows XP Windows Server 2008 Windows Server 2003 6 MB available on hard disk 64 MB of RAM or more Active@ UNDELETE supports all major operating system platforms | Windows 7 (all editions, including 64-bit) Windows Vista (all editions, including 64-bit) Windows XP (Home, Professional, Media Center, Tablet Edition, 64-bit) Windows 2003 and 2008 Server (all editions). Windows 2000 Windows 98. (Support for Windows 98 stopped after version 1.31.437.) If you're running 64-bit Vista or XP, the Recuva installation file will install a 64-bit version of Recuva. | Windows 64 and 32 bits, Linux and OS X | (Windows, Debian, Red-Hat, and Mac OS |
| System Requirements | Minimum 1GB of RAM. (8GB+ recommended) 200MB of free disk space, or can be run from USB drive | Minimun CPU: 1.2 GHz Pentium III or later Memory: 2 GB or greater (4 GB or more Recommended) Available disk space: 500MB (a large amount of temporary space is recommended for viewing and hashing evidence files) CD-ROM or DVD-ROM Drive VGA Monitor or High Resolution Monitor Keyboard & Mouse or compatible pointing device | Minimum 256 MB RAM and 1 GB free hard disk space | Minimum 256 MB of RAM, a mouse, and enough disk space for recovered files, image files, etc. •The administrative privileges are required to install and run R-Studio utilities. •A network connection for data recovering over network. | Minimum 32 MB of RAM, enough disk space for recovered files, image files, etc. | Minimum Memory (RAM): 512 MB of RAM required. Hard Disk Space: 1 GB of free space required for full installation. Processor: Intel Pentium 4 Dual Core GHz or higher. | There are no minimum memory or hard drive requirements | The 64 bit version of Autopsy requires a minimum of 8GB RAM (16 GB recommended). When the 64 bit version of Autopsy is installed on Windows it will be limited to a maximum heap size of 4GB leaving the remaining memory for the operating system, the internal Solr text indexing service and other applications | Minimum RAM:1 GB Free Disk Space: 100 MB of free space required for installation Processor: Intel Pentium 4 or later |
| Supported File System | NTFS (Windows) * · FAT16/FAT32 (DOS/Windows) · exFAT (Windows) · Ext2/Ext3/Ext4 (Linux/Android)** · HFS+/HFSX (Mac/iPhone/iPad) | Windows: FAT12, FAT16, FAT 32 and all NTFS file systems including Dynamic Disk and Software RAID. Mac OS X: HFS, HFS+. Linux: EXT2, EXT3 and EXT4. Solaris: UFS | FAT12/16/32, exFAT, NTFS, Ext2/3/4, Next3®, CDFS, UDF | NTFS encrypted files, NTFS alternative data streams, NTFS data deduplication, NTFS LogFile, NTFS Symbolic Links & Directory Junctions; HFS+ journal processing, HFS+ extended attributes, HFS+ compressed files; Ext2/Ext3/Ext4 FS/UFS journal processing and extended attributes | NTFS, ReFS, exFAT, FAT, HFS+, UFS, XFS, JFS, Ext2/Ext3/Ext4 & BtrFS | FAT, NTFS, NTFS + EFS, MacOS HFS+, Linux Ext2/Ext3/Ext4, Unix UFS | NTFS, FAT, and exFAT-formatted drives. | NTFS, FAT, ExFAT, HFS+, Ext2/Ext3/Ext4, YAFFS2 | FAT12, FAT16, FAT32, Ext2FS, Ext3FS, Ext4FS, ReiserFS3, exFAT, NTFS, HFS,HFS+, CDFS, VXFS |
| Easy to use | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Fast | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Extensible | Yes | No | Yes | No | No | No | No | Yes | No |
| Cost Effective | Budget-friendly | Free | Budget-friendly | Budget-friendly | Budget-friendly | Budget-friendly | Free | Free | Free |
User reviews and comments