ADF Triage Tools: Feature Comparison

Triage-G2 Triage-
Examiner		 Triage-
Responder
Deployment USB Dongle USB Dongle USB Dongle
Training ADF Examiner ADF Examiner ADF Investigator
Run  scans on live (on) computers Yes Yes Yes
Run  scans on dead (off) computers Yes Yes Yes
Export basic reports Yes Yes Yes
Review intelligence/evidence on suspect computer Yes Yes Yes
Keyword, hash, grep search capabilities Yes Yes Yes
File collection Yes Yes Yes
Scan NTFS, FAT, EXT, HFS systems Yes Yes Yes
Advanced Image analysis search Yes Yes Yes
Add custom keywords prior to running scan Yes Yes Yes
Run scans with custom Search Profiles Yes Yes Note 1
Bookmark intelligence/evidence on suspect computer Yes Yes  
Create SearchPaks® Yes Yes
Create Search Profiles Yes Yes
Create custom reports Yes Yes
Image suspect drives Yes Yes
Use external USB device for data collection Yes Yes  
Stealth mode Yes  
Deploy classified SearchPaks (advanced encryption) Yes  
Extended license duration (limitations) Yes
Scan external devices connected to
examiner’s computer (USB, CD, DVD, SD cards, etc.)		 Yes Note 2
Scan drive images (dd, e01) with Lab Add-On only   Yes  

Note 1: Triage Responder is limited to run only 3 preset profiles
Note 2: Available in Triage-Examiner Lab Add-On (All ADF tools will scan external devices connected to a suspect computer)