Welcome to : Forensic Data Recovery

Professional Modules add a powerful capability to this product.  Blade is also ideal for practitioners (or technicians with limited forensic training) who want to perform quick and easy data recovery without resorting to using scripting programming languages or tying up their main forensic tool.

Recovery Profile Version Management System

One of the major problems with using scripted data recovery in a forensic environment is version control and traceability.  Blade now has a Recovery Profile Versioning System which allows the forensic examiner to prove the recovery profile settings used to recover evidence in a case.  This information is written to an audit log which evidences the settings at the time of recovery.  Any changes to a recovery profile is both time and version stamped.

By examining the audit log for a case specific recovery, an independent third party can see the exact settings used and replicate the findings, thereby complying with the ACPO (Association of Chief Police Officers) principles as outlined in the Good Practice Guide for Computer-Based Evidence.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Advanced JPEG Image Validation and Recovery

The JPEG image is one of the most popular digital picture formats in use today and is frequently of great interest during forensic examinations involving indecent images of children.

The accurate recovery of JPEG images is extremely difficult using traditional carving techniques because of the complicated structure of the file. Modern JPEGs can have thumbnail and preview images embedded within them which makes simple Header/ Footer carving of accurate data impossible.  Traditional techniques are likely only to be able to extract thumbnail or preview images leaving the main image un-extracted.

To solve this problem for JPEG images, Blade now implements a comprehensive advanced validation routine. The validation routine understands the internal structure of the JPEG file and employs verification and checking as the data is extracted. If the image cannot be rendered as a full (or partial image), it is not extracted. Data which fails validation is recorded in the Validation Error Log. This log identifies the exact physical location on the source and provides a reason for non-validation.

We would encourage you to test this against other software which claims to recover accurate JPEG images.

Video Library: Introduction to Blade and the Data Recovery Features

To help you understand how Blade works and to demonstrate the power of the software we have created a number of demonstration videos and presentations.  In the video library,  you will find a number of introductory screen-capture videos demonstrating the powerful capabilities of Blade.

The videos will show you the user interface and explain some of the main features.  They will show access to the Global and Personal signature database where the forensic examiner can create and tweak data recovery profiles.

There is also an introduction to each Blade Professional Module with a demonstration of how each one works.  The professional modules are the key to the power of this software.