Arsenal Recon Launches Breakthrough Microsoft Windows Hibernation Forensic Tool

Hibernation Recon Provides Digital Forensics Experts with Unprecedented Access to Hibernation Data

Arsenal Recon, digital forensics experts building powerful tools to improve the analysis of electronic evidence, announced the formal release of Hibernation Recon today. Hibernation Recon extracts valuable information from Microsoft Windows® XP, Vista, 7, 8, 8.1, and 10 hibernation files that other tools have failed to reveal for many years. Digital forensics experts armed with Hibernation Recon are now able to exploit not only the active contents of Windows hibernation files, but also massive volumes of information in the multiple levels of slack space within them.Why was Hibernation Recon developed?
Arsenal President Mark Spencer noticed during high-profile cases that existing digital forensics tools were failing to extract important evidence from Windows hibernation files. The more the Arsenal team investigated, the more problems they found with existing tools. “Digital forensics experts are well aware that support for Windows 8, 8.1, and 10 hibernation files has been non-existent or lacking in their tools. What they may be surprised about is how their tools are also failing to properly identify and extract information from multiple levels of slack space within Windows hibernation files,” said Mr. Spencer.

Who should use Hibernation Recon?
Hibernation Recon has been developed for corporate, law enforcement, and military digital forensics experts. As the adoption of Cloud technologies and solid-state storage increases, the exploitation of hibernation files to “look back in time” and uncover compelling evidence from Windows computers becomes even more important. Digital forensics experts can no longer afford to analyze electronic evidence without extracting maximum value from Windows hibernation files.

What are people saying?
“Hibernation Recon gives us the ability to quickly and accurately recover data from hibernation files missed by other tools. Output is very descriptive and helps us better understand the recovered data. Hibernation Recon will be finding a permanent place in our workflow.”
— Peter Kohler, Esq., Digital Forensics and eDiscovery at Evidox Corporation

About Arsenal Recon
Our team is led by Mark Spencer, whose philosophy is “Don’t settle for the easy way, strive for the right way.” We are passionate about computer forensics and dedicated to the preservation and analysis of electronic evidence using the most powerful technologies available. In our quest to dig deeper, we grew tired of waiting for solutions to meet our needs – so we began building our own.

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

Mark Spencer

Leave a Comment

Latest Videos

Digital Forensics News Round-Up, June 19 2024 #dfir #digitalforensics

Forensic Focus 19th June 2024 2:46 pm

Digital Forensics News Round-Up, June 19 2024 #dfir #digitalforensics

Forensic Focus 19th June 2024 2:14 pm

Digital Forensics News Round-Up, June 12 2024 #dfir #digitalforensics

Forensic Focus 12th June 2024 5:51 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles