IEF Similar product...
 
Notifications
Clear all

IEF Similar products

odedshankar
(@odedshankar)
New Member

Hi Guys,

I would love to know from users experience
are there any other products that works in a similar one button method as Magnet IEF for searching internet evidence?

Quote
Topic starter Posted : 19/09/2015 5:24 am
Igor_Michailov
(@igor_michailov)
Senior Member

Belkasoft.
It can find more internet artifacts then IEF. Sorry Jamie.

If you want to find only history of browsers, NetAnalysis may be good.

ReplyQuote
Posted : 19/09/2015 9:01 pm
odedshankar
(@odedshankar)
New Member

Thanks Igor, will check it out.

I have been Testing Magnet IEF and NetAnalysis, i liked Magnet results of many IEF artifacts.
Didn't liked NetAnalysis much, it is not very human readable reporting.

ReplyQuote
Topic starter Posted : 20/09/2015 7:31 am
Adam10541
(@adam10541)
Senior Member

Belkasoft.
It can find more internet artifacts then IEF. Sorry Jamie.

I jumped onto Belkasofts site to download a trial but appears only LE and Universities can get a free trial?

ReplyQuote
Posted : 21/09/2015 2:47 pm
odedshankar
(@odedshankar)
New Member

just try and write in the notes when you ask for trial that you require a full version for testing, i think that if you're from a legit company there is a good chance that they will approve it for you.

ReplyQuote
Topic starter Posted : 21/09/2015 4:40 pm
Adam10541
(@adam10541)
Senior Member

You are correct they did )

Nice piece of software, ran some testing side by side with IEF and was impressed. Some issues with speed and some random crashes but all in all I like the software.

Love the timeline feature, by far one of the best I've seen and easiest to use.

Next decent job I get I think I'll look to add that to the tool kit and run side by side with IEF, between the two tools I think the results will be comprehensive.

ReplyQuote
Posted : 29/09/2015 8:05 am
Chris_Ed
(@chris_ed)
Active Member

Interesting about the timeline - how does it compare with the IEF version?

ReplyQuote
Posted : 29/09/2015 1:47 pm
Igor_Michailov
(@igor_michailov)
Senior Member

Interesting about the timeline - how does it compare with the IEF version?

nohow

ReplyQuote
Posted : 29/09/2015 2:11 pm
odedshankar
(@odedshankar)
New Member

I am still testing both IEF and Belkasoft on the same few drives, and up to this stage i am more impressed by IEF.
Although to be honest i am not sure i am using Belkasoft to the full extent as it is less automatic tool and requires more skill with the tool which i do not have at this stage.
Few things i noticed while benchmarking on similar subject drives
1. IEF scans for much longer, I scanned an HFS+ 250GB HDD, it took 48 hours, while with Belkasoft it took around 8 hours - although Blekasoft finds more evidence artifacts they are less complete, less relevant and less summarized. for example IEF found 129 dating sites URL's in carved web history and displays it automatically - while Belkasoft doesn't, and when i execute a search with all the dating sites keywords on the results - it finds nothing which is a concern in my industry which is data recovery. although scanning time is extensive in IEF it probably uses some specialise heuristics to find relevant data better.
2. another problem that i experienced in Belkasoft is many software crushes which are mishandled software exceptions and the software shutdown, honestly i expect more from a tool at this price level.
3.another issue with belkasoft is that there is no proper indication when a task is finished. when you start a task, it runs it in the background which is good and indicate a multitasking design but there is no obvious indications to the user when a process is finished.
4. a great thing i found about belkasoft is the tech support - they are extremely helpful and nice and very responsive.
5. it seems that belkasoft has many features that i need to find out as it is a complex tool and it takes some time to learn such tools - i am still working on the trial version - see how i go with more test drives.

ReplyQuote
Topic starter Posted : 29/09/2015 8:20 pm
Belkasoft
(@belkasoft)
Active Member

Thanks everyone for good points on our Belkasoft Evidence Center. We are open to discuss your feedback and possible improvements at support@belkasoft.com or just write to PM here.

You can always request a trial at http//belkasoft.com/trialhttp//belkasoft.com/trial. Make sure to put your business email, though.

ReplyQuote
Posted : 29/09/2015 11:33 pm
Belkasoft
(@belkasoft)
Active Member

Interesting about the timeline - how does it compare with the IEF version?

We have two types of timeline graphical and table-view. Graphical timeline is just a visualization of what kind of communications and when were performed. It helps to see periods of time when a suspect was most active.

Table view is used to see all events in a case in details. It has all possible types of time, every artifact provides. For example, a picture can have 4 or 5 events in the table-view timeline (file times + GPS time from EXIF + Picture taken time from EXIF).

At the table-view timeline you can filter events by event type, UTC or local time, data source (our case can contain multiple data sources, that is, images, real drives, phone dumps, memory dumps or folders) and by text.

You can see more here

Table-view timeline in BEC http//belkasoft.com/en/bec/en/Timeline.asp
Graphical timeline in BEC http//belkasoft.com/en/bec/en/GraphicalTimeline.asp

ReplyQuote
Posted : 29/09/2015 11:38 pm
Belkasoft
(@belkasoft)
Active Member

129 dating sites URL's in carved web history and displays it automatically - while Belkasoft doesn't

Indeed we do not have such specifics. We have customers in 70+ countries and each has its own set of dating sites as well as other types of sites. That's why we allow our users to do keyword file searches.

and when i execute a search with all the dating sites keywords on the results - it finds nothing which is a concern in my industry which is data recovery.

Please contact us at support@belkasoft.com to resolve the issue. Search should be working.

2. another problem that i experienced in Belkasoft is many software crushes which are mishandled software exceptions and the software shutdown, honestly i expect more from a tool at this price level.

Let's try to resolve this issue as well in email.

3.another issue with belkasoft is that there is no proper indication when a task is finished. when you start a task, it runs it in the background which is good and indicate a multitasking design but there is no obvious indications to the user when a process is finished.

This is not correct statement. We do have detailed indication of all running tasks and their statuses. Please see http//belkasoft.com/en/bec/en/Task_Manager.asp

4. a great thing i found about belkasoft is the tech support - they are extremely helpful and nice and very responsive.

Thanks, Odedshankar. Let's use this point to resolve p. 1 and 2 )

ReplyQuote
Posted : 29/09/2015 11:43 pm
odedshankar
(@odedshankar)
New Member

as mentioned - great support and your reply shows that, no worries I'll email your support email to try and resolve.

cheers

ReplyQuote
Topic starter Posted : 30/09/2015 4:00 am
Share:
Share to...