Description
Belkasoft X Corporate criminology tool
Belkasoft X Corporate is professional software for analysing digital evidence from computers, hard drives, mobile devices or RAM. Among other things, it enables their capture, verification and presentation. The data extraction process is fast and simple, and additionally enables the recovery of lost files.
Advanced data acquisition features
Belkasoft X Corporate digital evidence extraction software is effective for extracting data from media such as PCs, laptops, mobile devices, RAM and even Google Cloud, iCloud or Office 365. In addition, it features compatibility with multiple operating systems, so it can be used in a variety of cases.
Belkasoft X Corporate offers data acquisition methods such as disk imaging, memory dumps, mobile device backups or restoring deleted files.
Many ways to capture evidence
The forensic tool, used primarily by investigators, detectives or IT specialists, allows data acquisition in several ways. These include transfer via USB cable, performing remote acquisition from a device or the cloud, as well as hardware-based methods such as the checkm8 exploit for iOS devices and snapshots specific to Qualcomm and MTK processors in Android devices.
Multiple options allow the action to be tailored to the specific type of device and situation. Regardless, the process will be fully effective and enable the acquisition of valuable digital evidence.
Detailed reports in a variety of formats
Belkasoft X Corporate collects and organises data, making it ready for immediate export. Detailed reports can be generated in formats such as PDF, XML, HTML or Excel. This allows documents to be easily shared between different platforms.
Additionally, a free portable evidence reader makes it possible to share analyses even with those who do not use Belkasoft software.
Automated processes
Although Belkasoft X Corporate software is a solution aimed at professionals, it is characterised by simple operation. Acquisition and many of the associated processes are automated, which significantly speeds up work.
This is also aided by the intuitive interface, and the built-in Plist or SQLite viewers facilitate the precise examination of specific data types.
Three software variants
Three variants of the solution, aimed at business use, are available:
- Belkasoft X Small Business - a simple and economical version for occasional use
- Belkasoft X Scale - a capacious solution for larger corporations dealing with digital investigations.
- Belkasoft X Enterprise - a comprehensive, all-in-one variant tailored to the needs of large companies.
One of the key differences is the endpoint ranges: the first version supports 2, the second 10, and the Enterprise variant as many as 100.
Specification
Belkasoft X Corporate criminology tool specification | |||
---|---|---|---|
Operating systems | Windows, macOS, Unix/Linux, iOS, Android, Windows Phone, Blackberry | ||
Storage devices | Hard disk drives and removable media | ||
Disk images | EnCase, FTK, X-Ways, AFF4, L01/Lx01, DD, SMART, Atola, DAR, DMG, archive files (tar, zip, etc.) | ||
Virtual machines | VMWare, Virtual PC/Hyper-V, VirtualBox, XenServer | ||
Cloud storage | Images based on Amazon S3 | ||
Memory | RAM dumps, hibernation files, paging files | ||
File systems | APFS, BTRFS, FAT, exFAT, NTFS, HFS, HFS+, ext2, ext3, ext4, XFS, F2FS, YAFFS, YAFFS2 | ||
Acquisition | Available for DD or E01 images with optional hash calculation and verification | ||
Data sources | Mobile device backups, GrayKey, UFED and OFB images, UFDR reports, chip-off and JTAG dumps, TWRP images, Blackberry IPD and BBB backups, Android dumps | ||
iOS | iTunes, agent-based, checkm8-based, lock file support, AFC, jailbreak device support, crash logs, screen capture | ||
Android | ADB backup, advanced ADB backup, agent backup, rooted device support, PTP/MTP, EDL for Qualcomm, MTK acquisition | ||
SIM cards | SIM card cloning using SIM card reader device and native Android agents | ||
Cloud and e-mail | Google Drive, Google Sync, Google Keep, GMail, Google Timeline, Google MyActivity | ||
iCloud | Storage and access to iCloud data | ||
Yahoo, Hotmail, Opera, Yandex, Mac.com and 25 other webmail clouds | |||
Huawei | Huawei cloud data service | ||
Storage and access to Instagram data | |||
Microsoft 365 | Storing and accessing data from Microsoft 365 | ||
Downloading QR code-based backups and chats | |||
Communicators | Telegram messenger data support | ||
WK | WK communicator data support | ||
Drones | ArduPilot DIY Drone, DJI Agras MF-1S, DJI Matrice, DJI Mavic, DJI Phantom 3, DJI Phantom 4, DJI Spark, Parrot Anafi, Qysea Fifish P3, Ryze Tello, Sense Fly | ||
Artifacts | Drone geolocation and traces, operator logs and traces, photos, videos | ||
Visualisation | Drone flight route maps and operator route maps in the built-in Map window | ||
Supported images | Berla .ivo export for Belkasoft | ||
Artifacts | Geolocation and traces, chats, SMS and calls, contacts, media | ||
Visualisation | Routes in the built-in maps window |