Welcome to : Forensic Data Recovery

Blade™ is a Windows-based, advanced professional forensic data recovery solution designed by Digital Detective Group. It supports professional module plug-ins which give it advanced data recovery and analysis capabilities.

The power and flexibility of the tool can be expanded as new modules become available. Blade supports all of the major forensic image formats and is more than just a data recovery tool. The professional modules have in-built Intelli-Carve™ validation and interpretation routines to assist with accurate data recovery. Some of the standard profiles also have Intelli-Carve™ validated routines (such as the JPEG recovery module).

The software has been designed for extremely fast/accurate forensic data recovery. Not only is it highly effective in the pre-analysis stage of a forensic examination, it can be quickly configured to recover bespoke data formats. It has specifically been written for the field of Digital Forensics.

--------------------------------------------------------------------------------------------------------------------------

Professional Recovery Modules

With the addition of professional modules, Blade can recover data which is not extracted by other forensic tools or traditional carvers.

Professional Modules add a powerful capability to this product. Blade is also ideal for practitioners (or technicians with limited forensic training) who want to perform quick and easy data recovery without resorting to using scripting programming languages or tying up their main forensic tool.

Professional Modules with Intelli-Carve™

- Outlook Express Recovery

- AOL Personal Filing Cabinet Recovery

- Link File Recovery & Deconstruction

- E01 Image Conversion (Convert to flat file image)

- INFO2 Record Recovery & Deconstruction

- Cryptographic Hashing Module

Key Features

- Regular Expression High Speed Advanced Carving
- Supports Headers, Data Landmarks & Footers
- User Created/Customiseable Data Recovery Profiles
- Pro Modules for Advanced/Specialised Data Recovery
- Variable Input Block Size, Sector Boundary Options
- Multithreaded for fast searching and recovery
- Forensic Audit Logging

- Recovery Profile Version Management System

- JPEG image recovery using Intelli-Carve™

Supports

- Single/Segmented Unix/Linux DD/Raw Image Files
- EnCase^® (v1-6) Image Files
- SMART/Expert Witness Image Files
- AccessData^® FTK Image Files
- Physical/Logical disk access

- Virtual Hard Disks (vhd, vmdk)

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

3GP/MPEG-4/ISO Base Media Format Intelli-Carve™ Module

ISO base media file format defines a general structure for time-based multimedia files such as video and audio. It is used as the basis for other media file formats (e.g. container formats MP4 and 3GP). ISO base media file format was specified as ISO/IEC 14496-12 (MPEG-4 Part 12).

Blade now contains an Intelli-Carve profile™ which reads and validates the recovered data prior to writing it out. In addition, Blade also recovers the metadata from each file and can write it out CSV log. This is particularly useful for recovering date/time information from video data where the video has been recovered from unallocated clusters. To set the metadata extraction options, right click on the recovery profile. Blade also identifies the type of file and appends the correct file extension. (Available in Blade Standard and Professional Version).

	INFO2 Recovery & Deconstruction Intelli-Carve™ Professional Module
With Version 1.8 comes a new Professional Module for the recovery and deconstruction of INFO2 records. This module can recover individual INFO2 entries (including purged entries) directly from a source image (such as DD or EnCase). Each field for each record is then deconstructed and written out to a number of different format for examination. Available formats include Excel compatible CSV, standard CSV, XML or SQLite database. This module is FREE for Blade Professional Users and individuals who have purchased the Link File Professional Module. (Available in Blade Professional).
	Cryptographic Hashing Professional Module
Also new in version 1.8 is our cryptographic hashing module. This professional module comes free with any professional module and is included as standard in Blade Professional. The module can take variety of different sources and perform hashing on the data. Input sources include all of the supported forensic image files such as EnCase e01, Smart S01, DD segmented and single flat file images. Output hashes include: MD5, SHA1, SHA256, SHA384, SHA512 and RIPEMD160. (Available in Blade Professional).

Video Library: Introduction to Blade and the Data Recovery Features

To help you understand how Blade works and to demonstrate the power of the software we have created a number of demonstration videos and presentations. In the video library, you will find a number of introductory screen-capture videos demonstrating the powerful capabilities of Blade.

The videos will show you the user interface and explain some of the main features. They will show access to the Global and Personal signature database where the forensic examiner can create and tweak data recovery profiles.

There is also an introduction to each Blade Professional Module with a demonstration of how each one works. The professional modules are the key to the power of this software.

Welcome to write_title("Blade"): Forensic Data Recovery