Anyone using new NetAnalysis?
I've just realized that NetAnalysis ver. 2 has been released a couple of days ago. I've been a 1.5x version user and rated it quite high.
However, when I went to the Digital Detective store to see the upgrade price I was shocked seeing that the upgrade price is almost twice I had paid for the original software!
For sure, it's a nice tool, but seriously - it parses only browsers' data. I've browsed thorough the promo materials but haven't found much justifying such price increase. There might be (and most likely are) some huge engine changes, but still…
Anyway, does anyone use NetAnalysis and has upgraded to version 2? If so, would you provide some comments helping me answer the question "is it worth it"?
Can you not share publicly? (
IEF has grabbed a large portion of the customer base due to their application-level approach to analysis. It's an unfortunate thing to say, but Netanalysis at this point is good for validating the output of other tools. $1000 for a single upgrade license if you can afford it.
It depends how important the web browser artefacts are to your case.
If I was going to use the artefacts in evidence I would want to be sure they are accurate and I am much more confident about the accuracy of NetAnalysis than any of the other tools which are becoming more prominent in the collection Internet artefacts.
Thanks for the heads up fraudit. No and I will not, in its glory days it was excellent but now very clearly a cash cow used to prop up a business with the passion lost from those days evident when you compare what developments occurred elsewhere over the last 6 years.
One of the new features listed sqlite/mysql capability… come on advertising decades+ tech invented by someone else is not new! How about we do everything IEF does but across the enterprise, now that would be a new feature, and worth the money.
I use a combo of IEF, free tools, SIFT and hex editor (i prefer winhex forensics to dual verify.
I think for under £200 it would be worth it - but £500.. ouch.
HstEx v4 especially seems a bit disappointing. There is no support for VSCs or expanding Xpress blocks from Hiberfil.sys (at least, it's not mentioned in the DD KB or in the PR). I suppose I'm expected to mount each VSC myself and run HstEx over it..? Not very satisfactory in most modern workflows, sadly.
I currently am using NetAnalysis v1.55. I'm looking to see if v2 is worth the purchase. Do a lot of companies/departments still use NetAnalysis? How does this compare to their competition? Is IEF superior? Can NetAnalysis do anything that IEF cannot already do?