JADsoftware Releases Internet Evidence Finder v5

Article Posted: February 02, 2012

JADsoftware Inc. announces the availability of Internet Evidence Finder (IEF) v5. IEF is a data recovery product used in computer forensics to retrieve deleted files on a computer hard drive. IEF can search for evidence within a number of applications including: social networking, IM chats, webmail, browsers, and p2p artifacts.

Forensic examiners, IT security professionals, litigation support personnel, incident response teams, cyber security specialists, and corporate investigators, use IEF in their investigative work.

“We have spent a significant amount of time with our customers to really understand their day-to-day challenges when coping with the vast amounts of digital evidence in their investigations,” said Adam Belsher, CEO of JADsoftware Inc. “Our customers told us to focus on the emerging internet-related artifacts, help accelerate their investigations, and to continue to make IEF easy to use.”

v5 Brings Exciting New Functionality to Aid Investigators

Now Recovers 45% more types of Internet-related evidence

  • Social Networking Artifacts: Supports Google+. Supports Facebook artifacts including e-mail, chat, wall posts, and status updates. These enhancements complement our existing support of Twitter, mySpace, and Bebo.
  • Instant Messenger Chat History: Skype chat, ICQ, and World of Warcraft have been added to the list of supported chat applications including Yahoo, GoogleTalk, MSN, AOL, mIRC, etc.
  • Browser History: IEF now supports full browser history, cookies, and other browser artifacts for Internet Explorer, Google Chrome, Apple Safari, and Mozilla Firefox.
  • Webmail: Continued enhancements for more robust support of Gmail, Yahoo Mail, MSN Hotmail.
  • Peer-to-Peer File sharing applications: Popular P2P applications such as Ares, eMule, Torrent, and Shareaza are now supported. This complements the existing support of Limewire/Frostwire, and Gigatribe.

Further streamlines investigations

  • Up to 20% faster searches saving even more time
  • IEF is an end-to-end solution
  • IEF saves time & money by eliminating the need for standalone browser forensic products
  • Single search for over 45 internet-related artifacts including Web browser artifacts
  • Native image mounting for .E01/dd files
  • The ability to select multiple drives to search
  • SQLite database structure to support larger data sets

Searching in even more places

  • Entire Logical or Physical Drives (.E01/dd images are now supported)
  • Unallocated space / deleted data
  • Selected Files (including live RAM captures, network PCAP files, the pagefile.sys / hiberfil.sys files, + more)
  • Entire user-selected folders and sub-folders
  • Other important areas on a hard drive where evidence may be found

Rich & Comprehensive Reporting

  • Simplified search pre-sets for the most common searches
  • Totally redesigned report viewer with enhanced capabilities including:

o Search, filter, and bookmark results
o Search alert capabilities for keyword matches (email/audible options)
o View search results as they are found
o Export/reporting improved to allow for selecting/deselecting columns
o All artifact locations map to physical sector offset or file offset

For more information, visit www.jadsoftware.com.

Related Topics: Computer Forensics Software Toolkit