Arsenal Recon

From ForensicsWiki
Revision as of 19:20, 13 October 2017 by Lc (Talk | contribs) (Registry Recon)

Jump to: navigation, search

About Arsenal Recon

Digital forensics consultants behind Arsenal Consulting and software developers well-known for finding smoking guns.

Software Products

Arsenal Image Mounter

Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows®. Arsenal Image Mounter includes a virtual SCSI adapter (via a unique Storport miniport driver) which allows users to benefit from disk-specific features in Windows like integration with Disk Manager, access to Volume Shadow Copies, and more.

Registry Recon

Registry Recon provides access to an enormous volume of Windows Registry data which has been effectively deleted, whether that deletion occurred due to benign system activity, malfeasance by a user, or even re-imaging by IT personnel.

Hibernation Recon

Hibernation Recon has been developed to not only support memory reconstruction from Windows XP, Vista, 7, 8/8.1, and 10 hibernation files, but to properly identify and extract massive volumes of information from the multiple types (and levels) of slack space that often exist within them.

External Links