ADF Triage Tools: Feature Comparison
| Triage-G2 | Triage- Examiner |
Triage- Responder |
|
| Deployment | USB Dongle or Desktop | USB Dongle or Desktop | USB Dongle |
| Training | Recommended | Recommended | Optional |
| Run scans on live (on) computers |  |
|
|
| Run scans on dead (off) computers | |
|
|
| Export basic reports | |
|
|
| Review intelligence/evidence on suspect computer | |
|
|
| Keyword, hash, grep search capabilities | |
|
|
| File collection | |
|
|
| Scan NTFS, FAT, EXT, HFS systems | |
|
|
| Advanced image analysis search | |
|
|
| Add custom keywords prior to running scan | |
|
|
| Scan devices connected to suspect computer | |
|
|
| Bookmark evidence on suspect computer | |
|
|
| Run scans with custom Search Profiles | |
|
Note 1 |
| Customizable report templates | |
|
|
| Export HTML report formats | |
|
|
| Export CSV and MS Word report formats | |
|
|
| Create custom reports | |
|
|
| Create SearchPaks® | |
|
|
| Create Search Profiles | |
|
|
| Image suspect drives | |
|
|
| Use external USB device for data collection | |
|
|
| Scan external devices connected to examiner’s computer (USB, CD, DVD, SD cards, etc.) | |
|
|
| Scan drive images (dd, e01) | |
|
|
| Stealth mode | |
||
| Deploy classified SearchPaks (advanced encryption) | |
||
| Extended license duration (limitations) | |
Note 1: Triage-Responder is limited to run Search Profiles created in Triage-G2 and Triage-Examiner.
