Friday, February 22, 2013

Passware has a new release

Passware Kit Forensic 12.3 has been released.

New features include:

  • Extraction of Facebook, Google, and other passwords from live memory and hibernation files
  • Distributed password recovery using custom dictionaries
  • Hardware acceleration using ATI cards
  • Others
To read more about this release visit

For sales and training visit


Tableau has a new firmware updater

Tableau Firmware Updater v7.01 has been released.

Remember the Tableau updater is used for all of Tableau's tools.

This update includes updates for:

  • T35es/T35es-R2 - Improved detection of media larger that 2TB
  • T6es - Bug fixed where data corruption could occur during an image.
To read the release notes visit

For training, sales, and other information visit


Cellebrite has a new update

UFED Physical Analyzer 3.6.5 has been released.

This release contains the following maintenance fixes:

  • Resolves decoding issues with Android SMS, iPhone SMS and MMS recipient fields, attachments with iPhone deleted MMS within Excel reports.
To read more about this maintenance update visit

For training, sales, and any other questions visit


Guidance Software has released a new version of EnCase

EnCase 7.05.03 has been released.

The main reason for this update was to fix some bugs.

  • When a snapshot is taken of a machine on a wireless network, EnCase can now determine the IP address.
  • More encryption support
To read more visit

For training with EnCase and for sales visit


Tuesday, February 12, 2013

Cellebrite has a new update.

I meant to post this last Friday but have been sick for the past couple days...sorry.

UFED has been released.

This is a big one.

New abilities include:

  • Physical and File System extractions from 101 HTC and Motorola locked devices running Android
  • Galaxy SIII and Galaxy Note II Physical extractions and decoding while bypassing passwords / PIN / pattern lock
  • Applie iOS 6.1 Physical, File System, and Logical extractions
  • Others (The above seem enough though.)
To read more visit

For training or purchases visit


Friday, February 1, 2013

Vound Software has released a new version of Intella

Intella 1.6.3 has been released.

This release has some pretty big changes!

1.6.3 new features:

  • Indexing support for e01 and l01 formats!
  • Indexing of Hotmail and Yahoo search warrant results
  • Indexing of nested mail containers (The example they give brings clarity here, "e.g. a zipped PST attached to an email in an Mbox file.")
  • Officially supported 64-bit version!
  • Support for 64-bit MS Office and Outlook (Hallelujah! (I had to Google how to spell Hallelujah...))
  • Cellphone improvements such as XRY's XML format
  • Spanish Translation!
  • Others
To read more visit

To purchase please visit


Paraben has released a new Device Seizure

Device Seizure 6 has been released.

I am not sure what the updates are...  On the Paraben website under Device Seizure 6 features, it still says, "Here's what's new in version 5."

I will keep checking with them to see if I can't get some more information for you.

Check for yourself


Access Data has some new releases

FTK 4.2 is now available.
MPE+ 5.2.1 is now available.

The FTK 4.2 release contains the following:

  • Support for Microsoft SQL Server 2008 R2 or 2012 as your FTK database
  • PostgreSQL 9.1.6 supported
  • Browse IIS log file data in HTML format
  • Procsess SAM and NTUSER.dat files into individual records organized by time, with some data shown.  (I'm not sure what it shows, I still need to play with it.)
  • FTK 4.2 can decrypt Bitlocker on Windows 7 and Windows Vista
  • More...
MPE+ 5.2.1 updates include:

  • More advanced features for parsing Android and iOS applications
  • Support for iOS 6.0.1
  • Logical Support for iPhone 5 and iPad mini
  • Others
To read more visit

For purchase, training, or more information.  Visit


New Year

Welcome back to the blog!

January was pretty slim on the updates.  There were a few at the end of the month, but I decided to hold off until today to post them.

Thanks for visiting and making this blog a success last year.  I hope to continue throughout this year as well.

I get to shamelessly brag a little bit about H-11 here.  H-11 Digital Forensics were the Guidance Software Authorized Training Partner of the Year Worldwide for 2012!

Lets make 2013 awesome as well!