Paraben's Forensic Sorter

Sort files into common categories and recover deleted files.

Paraben's Forensic Sorter  Review

Designed for computer forensic examiners to help organize and speed up the examination of the contents of a hard drive, Forensic Sorter allows you to sort the contents of entire hard drives into categories such as video, audio, spreadsheets, etc. so you can easily find what you're looking for. Filter out common Windows files, recover deleted files or file fragments in slack, deleted, and unallocated space. Supports drive images in RAW, PFR (Forensic Replicator), Safeback, and EnCase image files. Compatible with Paraben's P2 Forensic Examination Technology. Sorts files by header not by file extension. Sorts files from unpartitioned space. Identifies encrypted files for easy recovery using Paraben's Decryption Collection. All data output is non-proprietary so any tool can be used for analysis post sorting. Designed for use with Paraben's Case Agent Companion. EFS file detection. Reads NTFS compressed files. NTFS streams support. HTML reporting. Ext 2 & Ext 3 partition support. Sorts compressed archives such as ZIP, RAR, etc. Sorts drives with bad sectors. Unicode support. Removable disk support. OLE storage support.Palm OS file detection. Chat log file detection. E-mail Examiner & Network E-mail Examiner supported file detection. XML output validation.