BlackLight R3 From BlackBag

by Jade James

BlackLight is a simple but smart investigation tool which allows examiners to quickly analyse computer systems and mobile devices. Searching is made easy with advanced filtering to sift through large data sets. The tool is aimed at law enforcement and federal agencies as well as corporations.

BlackLight R3 supports processing of the latest Mac systems including T2 chip, Fusion and encrypted devices. Examiners can also review history in APFS snapshots and Time machine backups.

Continuing support for Windows systems means that examiners can review, analyse and parse certain artifacts such as volume shadow copies, the registry, recent documents, the recycle bin, and much more.

Read More


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


Leave a Comment