Belkasoft Evidence Center

Extract digital evidence from suspects' hard drives. Recover hidden and destroyed evidence with Data Carving. Extract difficult to recover artifacts with Live RAM analysis. Supporting more than 250 types of artifacts, Belkasoft Evidence Center Pro can extract Web browsing data including favorites, history and cookies, instant messenger communications, chats, office documents, and many more types of evidence.

The Professional edition of Belkasoft Evidence Center enables forensic investigators to extract many types of digital evidence in a forensically sound way. The forensic investigation tool detects all major office documents, Web browsing histories including cookies and bookmarks created by all popular Web browsers, online chats instant messenger communication in more than 70 clients, email messages and attachments in all popular formats, social networking and gaming communications and many other types of evidence.

In addition, Belkasoft Evidence Center Pro comes equipped with algorithms allowing the product to detect encrypted files and perform a comprehensive search for destroyed evidence.

The Pro edition of Belkasoft Evidence Center supports Data Carving and Live RAM analysis, allowing investigators to discover more digital evidence than ever. Data carving analyzes the entire hard drive in low-level mode, searching for deleted files and discovering many types of destroyed evidence by their signatures or characteristic structures.

Live RAM analysis helps investigators recover certain types of digital evidence from computer's memory dumps, hibernation files and page files. Carving memory dumps allows discovering evidence that's never been written to the hard drive such as conversations, online chats, social networking activities and other types of communication with disabled or unavailable logs.