Forensic IM Analyzer

Forensic IM Analyzer helps forensic professionals extract more digital evidence from suspects' hard drives at a very affordable price. Belkasoft Forensic IM Analyzer extracts and analyzes log files, communication histories and contact databases of a wide range of instant messenger applications including Skype, AOL, ICQ, MSN and Live! Messenger, Yahoo! Messenger, RQ, Miranda, MySpace IM, SIM, QIP, QIP Infium, Trillian, AIM, Digsby, Rambler Virtus, Mail.Ru Agent, QQ, and many other instant messengers for Windows, Linux and MacOS (more than 80 applications in total).

Forensic IM Analyzer is the most affordable edition of Belkasoft Evidence Center supporting all types of evidence produced by popular instant messengers. The tool can successfully bypass passwords protecting instant messenger databases, giving investigators instant access to IM histories. Conversations can be exported into a variety of formats including plain text, HTML and XML formats. Convenient searching and filtering allows quickly locating or filtering key phrases, while regular expression support allows running complex searches of phrases with fuzzy structures.

Belkasoft Forensic IM Analyzer can automatically detect installed messengers, detecting the location of history files on suspect's hard drive as well as on mapped network drives (including Encase mapped drives). Investigators can work with several histories at the same time.

Belkasoft Forensic IM Analyzer can mount disk images captured by other forensic tools in major formats (e.g. EnCase including Ex01, DD and SMART).