MacForensicsLab 1.0

SubRosaSoft.com today began shipping MacForensicsLab 1.0, its software developed for law enforcement and forensic professionals. "From acquiring the image of a suspect’s drive, to analyzing the suspect’s data, to the final reporting, MacForensicsLab will do it all," the company said. The company said that the analyze function enables users to examine files in Hex and text mode; an "acquire" function uses an intelligent algorithm to image mechanically unsound drives; and a salvage function retrieves files that have been deleted and recovers potentially lost files from hard drives (Mac, Windows, and Linux), CD-ROMs, external storage devices, digital camera memory cards, iPods, and more. The software searches through the directory structure to catalog all files as well as to zero in on suspect material; it can create a list of all files within a directory structure including all catalog information, MD5, SHA-1, and SHA-256 checksums, and basic file information. The $1000 CD-ROM, which runs on Mac OS X 10.3 or later, boots from machines ranging from first-generation iMacs to the latest Intel-based machines.

by MacNN Staff