by Jade James
BlackLight is a simple but smart investigation tool which allows examiners to quickly analyse computer systems and mobile devices. Searching is made easy with advanced filtering to sift through large data sets. The tool is aimed at law enforcement and federal agencies as well as corporations.
BlackLight R3 supports processing of the latest Mac systems including T2 chip, Fusion and encrypted devices. Examiners can also review history in APFS snapshots and Time machine backups.
Continuing support for Windows systems means that examiners can review, analyse and parse certain artifacts such as volume shadow copies, the registry, recent documents, the recycle bin, and much more.