Paraben's P2 eXplorer allows you to mount a forensic image (or Linux DD, RAW, or other drive images) and explore it as though it were a drive on your machine while preserving the forensic nature of your evidence. This means that an image isn't just mounted to view logical files, it is mounted as the actual bitstream image, preserving unallocated, slack, and deleted data. FEATURES: Mounts Paraben's Forensic Replicator images (PFR). Mounts compressed & encrypted PFR images. Mounts EnCase images. Mounts SafeBack 1 & 2 images. Mounts WinImage non-compressed images. Mounts RAW images from Linux DD & other tools. Supports Dynamic drive images. Auto-detects image format. Supports both logical and physical images types. MD5 hash verification. Shell support for easy mounting/unmounting. Write-protection for preserving evidence. MD5 checksum verification. Supports mounting over a network. Mount several images at a time.
Comments