ADF digital forensic software is known for rapid file and artifact collection but we're also widely respected for our seamless user interface. No matter whether you are using Mobile Device Investigator, Triage-Investigator, Triage-G2, Digital Evidence Investigator or our PRO tools, ADF tools are designed to make it easy for investigators to quickly determine what to scan and how to scan it.
Our goal is to make empower investigators to make rapid on-scene decisions so they can quickly identify victims, suspects, and move their case forward toward a successful outcome.
Watch this short 6-minute How To video to learn how to Organize the Records View.
On-scene triage and digital investigations can be stressful, especially when reviewing data in hostile or time constrained situations. ADF automates analysis to speed decision making and gives investigators the ability to customize views and are designed to provide a single uniform user experience across all our tools. So if you're using Digital Evidence Investigator for computer forensics and decide to upgrade to DEI PRO to add smartphone and mobile evidence collection, the user experience is the same.
Frontline agents and investigators can configure views to make records easy to view so they'll have all the pertinent evidence and information at their disposal to tie files, evidence, and artifacts to the user in a timeline view.
In addition to ADF's powerful classifier and tagging engine, investigators can create new tags, apply their own, add comments and display post-scan processing tasks including the visual classification of pictures, videos and entity extraction (with the Rosoka Add-On).
The Details Panel provides deeper information for individual file or artifact records. The options are displayed in a series of horizontal tabs with additional functionality accessible via the right-hand toolbar of the details panel which provides information on:
When an artifact record references a file found on the target file systems, a link is established between the two. We refer to these files as referenced files. A hyperlink makes it possible to navigate from the artifact record to the referenced file(s). Another hyperlink, called Linked Artifacts, exists between the referenced file and their artifact record(s).
File records that have been identified by a keyword search or a hash value search may be more relevant than the other records because they match a specific search criteria. To help them stand out, a Match indicator is shown in tables and gallery views. The Match indicator can also be used to sort and filter records.
Law enforcement agencies that want to deploy digital forensic triage to the field to speed computer investigations should consider Field Investigator for Teams.