- Advanced logical acquisition of iOS/Android/ChromeOS data up to 4GB per minute
- Scan and Image ChromeOS Devices
- Live Preview Mode - View phone content immediately without waiting for a backup or imaging to finish
- Auto-scroll when taking screenshots of long pages on Android
- Screen Recording for Android, iOS, and ChromeOS Devices (up to Android 14 and iOS 17) with Preserved Audio
- Support for the Developer Mode on iOS 17 and Android 14
- Scan and acquisition support for iOS 17 and Android 14
- Image live macOS computers via our remote agent and create an AFF4 logical image
- Image live ARM CPU-based Window devices
- Capture and organize screenshots of connected mobile devices while navigating with automatic processing to extract and index text for search, annotation, and reporting
- Recover call records, messages, saved contacts, and calendar data
- Recover WiFi connections, usernames, installed applications and Android user accounts
- Recover pictures, videos, audio files, documents, and user-defined file types
- Recover database files and Property Lists for later review
- Recover browsers, browsing history, download history, search terms, form data, bookmarks, and more
- Capture Revolut mobile app data and organize it in a financial transactions table (iOS)
- Search for specific information using keywords, regular expressions, hash values, and PhotoDNA
- Identify files or artifacts containing terms related to child exploitation
- Automatically encrypt backup to obtain more data on iOS devices
- Capture RAM and volatile memory
- Rapidly search suspect media using large hash sets (>100 million), including VICS 2.0 and CAID
- Find relevant files and artifacts using powerful keyword and regular expression search capability
- Collect password-protected and corrupted files for later review
- Collect iOS backups on target computers
- Recover deleted records from apps using the SQLite database
- Supports collection of artifacts from Windows and macOS (including T2 and M1 chips)
- Image drives out-of-the-box with image verification and imaging log file
- Recover images from unallocated drive space
- Recover and process deleted partitions
- Detect and warn of BitLocker and FileVault2-protected drives
- Search and collect emails: MS Outlook, Windows Mail, Windows Live Mail 10, Apple Mail
- Highly configurable artifact and file collection including web browser cached files, social media, P2P, Cryptocurrency, cloud storage, user login events, anti-forensic traces, saved credentials, files shared via Skype, USB history, user connection log, etc.
- Investigate attached devices, live powered-on computers, boot scans from powered-off computers, forensic images, contents of folders, and network shares (including NAS devices)
- Prepare a Collection Key without Search Profiles to select Captures just before a scan
- Prepare a Collection Key: Protect the Collection Key with BitLocker (instead of the Search Profile option)
- Ability to borrow license tokens for collection keys
- Deploy user-created Captures to the Collection Key when not using Search Profiles
- Create new log files for logical images
- Process logical images from the data container
- Simplified data container to store Mac logical images
- Scan full mobile device acquisitions and detect keychain/keystore files (GrayKey, UFED)
- Use password and recovery key to decrypt and scan or image BitLocker volumes including those using the new AES-XTS encryption algorithm introduced in Windows 10
- Process APFS partitions, NTFS, FAT, HFS+, EXT, ExFAT, and YAFFS2 file systems, compute MD5 and SHA1 on collected files for integrity validation
- Leverage the powerful boot capability (including UEFI secure boot and Macs) to access internal storage that cannot easily be removed from computers
- Direct access to the Capture screen with the ability to define the time range of data collection, define collection per app in a Search Profile, select Captures and apps before a live or boot scan, and exclude folders
Quickly go through the recovered data with the powerful results viewer to explore gigabytes of information in minutes.
- Leverage facial analysis age detection to quickly sort and identify infants, toddlers, children, and adults
- View results while a scan is running
- View chat conversations with bubbles to easily identify the senders and receivers with “Message Thread” hyperlink to select individual conversations
- Filter search results with sorting and search capabilities (dates, hash values, tags, text filters, and more)
- Search scan results using keywords, with results categorized by record type
- View thumbnail(s) of attached reference files (displays them in the HTML/PDF report as well)
- In gallery view, filter out images that aren’t rendered
- View pictures and videos organized by visual classes such as people, faces, currency, weapons, vehicles, indecent pictures of children
- View links between files of interest and user’s activities such as recently accessed files, downloaded files, attachments, and more
- View highlighted encrypted files in the scan summary
- Redact previews when exporting a report
- Comprehensive video preview and frame extraction
- Automatically tag hash and keyword matches
- Define new file types and select individual ones to be processed
- Display provenance, including comprehensive metadata, of all relevant files and artifacts
- Reorder or disable post-scan tasks (classification of pictures, videos, or entity extraction) to run in the Viewer
- ADD-ON: Entity Extraction and Language Translation Gisting (230 languages) available
-
ADF PRO lets you create a standalone portable viewer for further analysis and reporting for prosecutors and other investigators.
- Precisely select which files and artifacts to export
- Import hash values from a VICS/CAID database with the possibility to select categories
- Import keyword list and prompt for default tags and comments if none are in the CSV file
- Import hash values from the CSV file and prompt for default tags and comments if none are in the CSV file
- Export errors when importing keywords or hash values
- Log issues when importing data
- Customize your report to show specific columns and redact pictures
- Present information in a table or list
- Include original files or previews only
- HTML, PDF, and CSV reporting options
- Export to other forensics applications with VICS / Project VIC (JSON) or CSV formats
- Share scan results with a portable standalone viewer
- Dell Latitude 7230 Extreme Rugged Tablet licensed with ADF PRO Software and with 12th generation Intel® i7 Core™, 16GB RAM, 1TB (or 2TB) SSD drive
- One Portable Travel Case
- One Licensed Digital Evidence Investigator® PRO Software Authentication Key
- 1TB External SSD Collection Drive
- One 4 Port USB Hub
- One USB-A to USB-C adapter
- One Adapter USB-C to Ethernet and 3 USB-A
- One Ethernet Cable
- One Collection Drive Cable USB-A to USB-C
- One Collection Drive Cable USB-C to USB-C
- PelicanTM case
- Software Maintenance and Support
- Cable USB-A to iOS 30-pin
- Cable USB-A to iOS Lightning
- Cable USB-A to MicroUSB
- Cable USB-A to USB-C
Request a Quote
Tested for every condition
- Subjected to drop tests from heights of up to 4 feet.
- Capable of withstanding temperatures as high as 63°C/145°F.
- Operates effectively even in extremely cold weather as low as -29ºC/-20°F.
- Rated as IP-65, ensuring maximum defense against dust, dirt, and water penetration.
- Starting weight of less than 2.8lbs/1.3kgs.
Screen
Glove touch capable true 12" 16:10 aspect ratio screen with 13% more active screen area. With the biggest screen area in a 12" fully-rugged tablet, and a 1200-nit direct-sunlight-viewable-display, everywhere outside can be your office.
Enhanced performance in the field
Elevate field productivity with 12th Gen Intel® CPUs, accommodating even the most demanding field applications with NVMe SSDs up to 2TB, a maximum of 32GB memory, and integrated Intel® Iris® Xe graphics.
Experience accelerated data transfer, charging capabilities, and video output through dual Thunderbolt 4 USB 3.2 Gen2 Type-C ports. Maintain uninterrupted work with a hot-swappable 36 Whr battery.
Accessories:
Premium Keyboard | Active Pen | Rigid Tablet Handle | Shoulder Strap | Rotating Hand Strap
Course Length
18 Hours: Learners typically take approximately 18 hours to successfully complete the exercises and the final certification exam.
Course Outline
- Introductions and getting started with Digital Evidence Investigator
- Triage and field use cases
- Preserving digital evidence and the boot process
- Installation and preparing a collection key
- Introduction to the DEI user interface
- Using a collection key to extract digital evidence
- Case Study 1: Child Exploitation - Quick Scan
- Case Study 2: Child Exploitation - Targeted Folders
- Case Study 3: Internet Scam
- Case Study 4: Suspected Terrorism
- File Identification
- Case Study 5: Search Profile Lab
- Advanced Concepts
- Final Exam
PRO Module: Mobile Device Investigator
- Overview and terminology
- Connecting a mobile device
- Conducting a scan
- Taking Screenshots
- Search Profiles
- Creating backups
- Creating Mobile Search Profiles
- Analyzing Mobile Evidence
- PRO Module Final Exam
Cost
$1690 Online Self-Paced Class
In-Person for Your Team (Request a Quote)
.png?width=1200&height=1200&name=ADF%20PRO%20Tablet%20%20(1).png)