AccessData's Ultimate Toolkit

Main Features

• Forensic Toolkit® (FTK^TM)
  Find, Organize and Analyse Computer Evidence
• Password Recovery Toolkit^TM (PRTK^TM)
  Recover Lost or Forgotten Passwords
• Registry Viewer^TM
  Analyse & Decrypt Registry Data
• 100 Client Distributed Network Attack® (DNA®)
  Putting Idle Time To Work
• WipeDrive^TM Home and Small Office Solution
  Completely Eliminate Hard Drive Data

AccessData's Ultimate Toolkit

Efficient Analysis of Suspect Hard Drives Under all Versions of Windows Including 3.11, '95, '98, ME, 2000, XP and NT

1. Forensic Toolkit
2. Password Recovery Toolkit
3. Registry Viewer
4. 100 Client Distributed Network Attack
5. Wipedrive
6. Microsoft NT Utility

1. Forensic Toolkit

The AccessData Forensic Toolkit® (FTK^TM) offers law enforcement and corporate security professionals the ability to perform complete and thorough computer forensic examinations. The FTK features powerful file filtering and search functionality. FTK's customizable filters allow you to sort through thousands of files to quickly find the evidence you need. FTK is recognised as the leading forensic tool to perform e-mail analysis.

Easy-to-Use

• View over 270 different file formats with Stellent's Outside In Viewer Technology
• FTK Explorer allows you to quickly navigate through acquired images
• Generate audit logs and case reports
• Compatible with the Password Recovery Toolkit^TM and Distributed Network Attack®

Advanced Searching

• Full text indexing powered by dtSearch® yields instant text search results
• Advance searches for JPEG images and Internet text
• Locate binary patterns using Live Search
• Automatically recover deleted files and partitions
• Target key files quickly by creating custom file filters

Supported File & Acquisition Formats

• File formats include: NTFS, NTFS compressed, FAT 12/16/32, and Linux ext2 & ext3
• Image formats include: Encase, SMART, Snapback, Safeback (up to but not including v.3), and Linux DD

E-mail & Zip File Analysis

• Supports: Outlook, Outlook Express, AOL, Netscape, Yahoo, Earthlink, Eudora, Hotmail, and MSN e-mail
• View, search, print, and export e-mail messages and attachments
• Recover deleted and partially deleted e-mail
• Automatically extract data from PKZIP, WinZip, WinRAR, GZIP, and TAR compressed files

Known File Filter^TM (KFF^TM)

• Identify and flag standard operating system and program files.
• Identify and flag known child pornography and other potential evidence files
• Includes hash datasets from NIST and Hashkeeper

2. Password Recovery Toolkit

Includes all the password recovery modules except for the NT & Novell password replacement utilities and a one year upgrade subscription.

The Password Recovery Toolkit is perfect for law enforcement and corporate security professionals. If you need access to locked files or if your users have simply locked themselves out of their files the PRTK can get you back in.

Security Risk Assessment Tool

Many people use the same password to gain access to different programs and network login areas. This could be one of the weakest links in your organization's security profile! Some password protection schemes are easy to crack while others are virtually impossible. But what if the same password is used for both programs? By gaining access to the weakest one you have gained access to the strongest one without the need to crack both.

Features

• Enables password management
• Analyses files and their passwords with an optional report file
• Recovers all types of passwords regardless of password length
• Analyses multiple files at one time
• Recovers multilingual passwords
• Prevents unauthorised use with a personal security code

Password Recovery Modules

AccessData has a wide variety of individual password breaking modules that can help you recover lost passwords for almost every product in the industry. Individual Password Breaker Modules

• MS Access
• ACT!
• Ami Pro
• Approach
• ARJ
• Ascend
• Backup
• BestCrypt
• Bullet Proof FTP
• Check Writer
• Cute FTP
• DataPerfect
• dBase
• Encrypt Magic
• FldrExcel
• FoxBase
• File Maker Pro
• Lotus 1-2-3
• Mail (MS)
• MS Money
• MYOB
• My Personal
• Norton Secret
• Stuff
• Organizer
• MS Outlook
• Palm
• Paradox
• PGP Disk File 4.0
• PGP Secret Key
• Ring
• Pro Write
• Project (MS)
• Q&A
• Quattro Pro
• QuickBooks
• Quicken
• WinRAR
• Scheduler+
• Symphony
• VersaCheck
• MS Word
• WordPerfect
• Word Pro
• Adobe PDF
• Win95/Win98 PWL Files
• IE Content Advisor
• WE_FTP
• Netscape Mail
• WinZip & Generic Zippers
• Source Safe
• PC-Encrypt

Utilities That Bypass Network Administrator Passwords

Windows NT & Novell

Toolkit Upgrade Subscription

The most affordable way to keep your software current.

Available to all current toolkit owners and as an add-on for new customers. Once your subscription has expired you can renew your subscription for the Password Recovery Toolkit. The subscription is valid for one year.

*Supports only English Versions of Windows

3. Registry Viewer^TM

The AccessData Registry Viewer gives you the ability to view independent Windows registry files. Using the Registry Viewer provides access to the "Protected Storage System Provider" key, which contains e-mail and Internet passwords and settings. Easily generate reports containing valuable data from registry keys of interest. The Registry Viewer includes a USB or parallel dongle to restrict unauthorized use.

Features

• Access and Decrypt Protected Storage Data
  • AutoComplete "form" data from Google, Yahoo, and more
  • Internet Explorer account login names and passwords
  • Outlook and Outlook Express account information including servers, users, and passwords

View Independent Registry Files

• Access User.dat, NTUser.dat, Sam, System, Security, Software, and Default files
• Opens all versions of Windows Registry files
• View files individually without reconstructing the full Registry

Report Generation

• HTML reporting capabilities
• Easily integrates with Forensic Toolkit case reports

Integrates with AccessData's Forensic Tools

• Seamlessly load registry files directly from the Forensic Toolkit into the Registry Viewer
• Generate password lists for use with Password Recovery Toolkit

4. 100 Client Distributed Network Attack

A new approach to recovering password protected files. In the past, recoveries have been limited to the processing power of one machine. DNA uses the power of machines across the network or across the world to decrypt passwords.

The DNA Server is installed in a central location where machines running DNA Client can acess it over the network. DNA Manager coordinates the attack, assigning small portions of the key search to machines distributed throughout the network. DNA Client will run in the background, only taking unused processor time.

Features:

• Easy to read statistics and graphs
• Add user dictionaries
• Optimisation for password attacks for specific languages
• Customise user dictionaries
• Stealth client installation functionality
• Automatic Client update when updating the DNA Server
• Control which clients work on certain jobs

Supported File Formats:

• Recovers and Decrypts.
  • ARJ
  • MS Word and Excel (97 & 2000)
  • PDF 1.4 and below

Recovers passwords from..

• MS Office XP
• PGP Disk 4, 5, 6
• Pkzip
• RAR up to version 2.9 of WinRAR
• Winzip

System Requirements:

DNA must be installed on one server and at least one client.

Server:

• Operating Systems: Windows NT, 98, 2000, and XP
• RAM: 512 MB
• 100 MB Network Card and TCP/IP communication
• CD-Rom
• USB or Parallel Port

Client:

• Operating Systems: Windows 95, 98, NT, ME, 2000, XP, and Solaris 8
• 10/100 MB Network Card and TCP/IP communication

** Currently, only the English version of MS Windows platforms is being supported.

5. Wipedrive

WipeDrive is the perfect tool for those who need to:

• Ensure that drives needed for forensic copying are completely erased prior to use.
• Completely erase a damaged operating system with possible hidden viruses.
• Erase all data before returning a computer to a company or employer.

WipeDrive's proven hard drive sanitization is trusted and used by:

• Leading financial institutions and legal departments of major Fortune 500 companies.
• Universities and health care facilities.
• Major government agencies worldwide.

Sanitizes Hard Drives

• Listed as an Approved Disk Sanitizing Tool.
• Supports any size hard drive (IDE or SCSI).
• Contains optional command line parameters that enable the user to run the program from a DOS batch file.
• Permanently erases operating systems, program files, and data.
• Erases ALL data from a physical drive.
• Erases all partition tables and drive formats - FAT16, FAT32, NTFS and Linux.
• Verifies that data has been erased.
• Feature to display specified sectors on the drive.
• Constructs a database of overwritten drives that can be imported into Microsoft Access® and Excel®.

Easy-to-Use

• Simply insert the WipeDrive boot disk into the A: or CD-ROM drive and restart the computer.
• Answer "Yes" to the confirmation prompts to erase the hard drive data.
• Generates report logs.
• Self-contained DOS bootable CD or diskette.

System Requirements

• Intel® compatible PC with CD-ROM, 8 MB RAM, and VGA or higher video support.
• WipeDrive 3.0 supports any size hard drive (IDE or SCSI).
• Ease-of-use makes it ideal for both home and commercial use.
• WipeDrive 3.0 can be used with all versions of DOS, Windows 3.x, 9x, ME, NT, 2000, XP, OS/2, and PC based Linux/Unix.

6. Microsoft NT Utility

Allows continued access to Windows NT 3.51 or 4.0 file servers with replacement of administrator password. This Utility only works on FAT drives.

Site Last Updated: August  2008

©2008 Computer Evidence Ltd
DIBS® is a Registered Trademark of DIBS USA, Inc.