Hibernation Recon Provides Digital Forensics Experts with Unprecedented Access to Hibernation Data
Arsenal Recon, digital forensics experts building powerful tools to improve the analysis of electronic evidence, announced the formal release of Hibernation Recon today. Hibernation Recon extracts valuable information from Microsoft Windows® XP, Vista, 7, 8, 8.1, and 10 hibernation files that other tools have failed to reveal for many years. Digital forensics experts armed with Hibernation Recon are now able to exploit not only the active contents of Windows hibernation files, but also massive volumes of information in the multiple levels of slack space within them.Why was Hibernation Recon developed?
Arsenal President Mark Spencer noticed during high-profile cases that existing digital forensics tools were failing to extract important evidence from Windows hibernation files. The more the Arsenal team investigated, the more problems they found with existing tools. “Digital forensics experts are well aware that support for Windows 8, 8.1, and 10 hibernation files has been non-existent or lacking in their tools. What they may be surprised about is how their tools are also failing to properly identify and extract information from multiple levels of slack space within Windows hibernation files,” said Mr. Spencer.
Who should use Hibernation Recon?
Hibernation Recon has been developed for corporate, law enforcement, and military digital forensics experts. As the adoption of Cloud technologies and solid-state storage increases, the exploitation of hibernation files to “look back in time” and uncover compelling evidence from Windows computers becomes even more important. Digital forensics experts can no longer afford to analyze electronic evidence without extracting maximum value from Windows hibernation files.
What are people saying?
“Hibernation Recon gives us the ability to quickly and accurately recover data from hibernation files missed by other tools. Output is very descriptive and helps us better understand the recovered data. Hibernation Recon will be finding a permanent place in our workflow.”
— Peter Kohler, Esq., Digital Forensics and eDiscovery at Evidox Corporation
About Arsenal Recon
Our team is led by Mark Spencer, whose philosophy is “Don’t settle for the easy way, strive for the right way.” We are passionate about computer forensics and dedicated to the preservation and analysis of electronic evidence using the most powerful technologies available. In our quest to dig deeper, we grew tired of waiting for solutions to meet our needs – so we began building our own.
Contact:
Mark Spencer
[email protected]
