Hello everyone, i'm on the line.. i have to chose between these two softwares and i was looking forward for some suggestions from your experience.
Considering i need to carve out of an evidence windows live chats, which in your opinion is the best one in terms of results?
also i did some comparison based on what they say on the site and well.
IEF
pros
- i tried the demo, looks like it's working fine, only 20 results are displayed tho, so it's hard to say if carving is effective or most of results are junk.
- seems to support lots of evidence formats
cons
- price is fairly high, and due to shipping of hardware dongle + shipping to EU (customs etc, it's even more expansive and can't be easly predetermined
Belka
pros
- on paper it looks like it supports lots of formats
- it also supports email analysis for traditional clients
- cheaper then IEF due to digital licensing
Cons
- i dunno the efficiency of the results, and it doesn't say in advice how much data it can extract (while JFF does).
so, based on your experience, which one is the best?
thanks in advice.
I would prefer IEF. It works very good and efficient.
I have tried Belkasoft and it did not perform well. The graphics are good but not really seem to work efficiently.
I would prefer IEF. It works very good and efficient.
I have tried Belkasoft and it did not perform well. The graphics are good but not really seem to work efficiently.
Hi Yunus,
What was wrong with Belkasoft tool? By efficiency do you mean that it works slower than other tools? If so, it might be caused by the fact that we can search for much more artifacts that anyone else among similar tools (more than 120 various types of artifacts). You can select only types of artifacts of interest to improve performance.
In v.3.8 we have also improved performance for image processing. Particularly, to process HFS/HFS+/ext2/ext3 file system better we have an advice, which you can receive by asking our support (support at belkasoft.com).
Thanks,
Hi Belkasoft,
I installed Belkasoft and actually used it on my own computer. My experience with it is as follows;
- It was not able to find any facebook or twitter artefacts although I have a lot of them (and IEF did find them)
- Although I have selected all options to bring, all it found was web browsers artifacts such as cookies and history. And the number of artifacts it found was far much less than those IEF. Although IEF found thousands of artifacts that relate to web browsers, Belkasoft were able to bring only a small portion of them.
- I have selected all types of artifacts in Belkasoft before it started to search, however, it was not able to bring web mail artifacts either such as google mail, hotmail etc.
Something is definitely wrong with Belkasoft. It does not seem to be reliable at all. Sorry.
Hi Belkasoft,
I installed Belkasoft and actually used it on my own computer. My experience with it is as follows;
- It was not able to find any facebook or twitter artefacts although I have a lot of them (and IEF did find them)
- Although I have selected all options to bring, all it found was web browsers artifacts such as cookies and history. And the number of artifacts it found was far much less than those IEF. Although IEF found thousands of artifacts that relate to web browsers, Belkasoft were able to bring only a small portion of them.
- I have selected all types of artifacts in Belkasoft before it started to search, however, it was not able to bring web mail artifacts either such as google mail, hotmail etc.Something is definitely wrong with Belkasoft. It does not seem to be reliable at all. Sorry.
Did you know, that there are two kinds of analysis in our tool - existing profiles and carving? I guess you only run search for existing profiles, not carving. Please try to run carving, which is a button next to search profiles.
Yunus, there is some info on how to run carving in Belkasoft Evidence Center http//
Now i feel some sort of guilty for having thrown up such a topic, i wasn't meant to start a flame (
Now i feel some sort of guilty for having thrown up such a topic, i wasn't meant to start a flame (
Nothing to be sorry about. Vice versa, thanks to your post, at least one problem will be hopefully solved.
Now i feel some sort of guilty for having thrown up such a topic, i wasn't meant to start a flame (
What "flame war"? BelkaSoft is offering to assist someone in the effective use of their tool…doesn't look at all like a "flame war" to me. Looks more like a customer support session.
Belkasoft contacted me and made some recommendations about configuring the software before doing the actual carving.
And I configured the software as they recommended and used it on a image file rather than my own live system, which was what I had done before.
And Belkasoft yielded almost the same results as the IEF. But it is very important that you should do carving rather than searching. The software has two functions "searching" and "carving".
Regards,