AccessData Lab

Computer Forensics Software Solutions to Ease the Burden on Labs Everywhere.

AccessData® enables computer forensics labs of all sizes, facing an array of challenges, to work more effectively. A single-person lab can radically speed up the processing of cases with the 4-worker distributed processing available with FTK. Computer forensics labs handling a greater number of cases with larger data sets will benefit significantly from the distributed processing and collaborative analysis capabilities found in FTK Pro. Finally, large labs handling massive data sets, utilizing a distributed workforce, or looking to collaborate with lawyers, HR personnel and other non-forensic parties can step up to AccessData Lab. AD Lab adds powerful and intuitive web-based review functionality, expanded distributed processing capabilities with a centralized processing farm, and a centralized database infrastructure. Regardless of the size, scope or mission of your computer forensics lab, AccessData has a solution that will meet your needs.

Which Computer Forensics Solution is Right for You?

Product Details:

A Secure Computer Forensics Lab Solution

Electronic evidence can be fully secured at the case or file level.
Granular role-based administration allows administrators to assign users to a given case or set of data within a case.
Users can be restricted by feature, so only qualified users can access more advanced functions.
Centralized logging ensures accountability.
Active Directory integration for authentication.
Web browser can use SSL for secure communication.

Manage Multiple Cases and Examiners

Multiple examiners share a centralized database for collaboration and review.
Centralized processing, indexing and data storage, with the ability to queue jobs into the distributed processing farm.
Custom data views allow administrators to define which items reviewers can see (e.g. analyst can only look at email from drive one in case abc123).
Simultaneous collaboration between Web reviewers and FTK forensic analysts.

Ease of Use and Efficiency

Leverage a shared, distributed processing farm to process massive data sets in a fraction of the time it would take using traditional computer forensics tools.
- Distributed Processing obviously requires powerful hardware and networking technology. Processing evidence is very disk IO intensive and requires fast drives. In addition, the machine that runs the Processing Manager must be the fastest computer (CPU) speed in the processing group. Finally, you will need the fastest networking technology available to you. For details on configuring distributed processing, please see the following documents. However, Lab customers will receive configuration assistance from our engineering team to ensure optimized functionality.
  - Configuring Distributed Processing with FTK 3
  - FTK 3 System Specifications Guide
User-friendly web interface enables true native review without having to convert to html or image format.
Easily overcome the bandwidth constraints of distributed labs with centralized or distributed databases and web-based analysis, enabling efficient sharing of workload.
De-duplicate data by custodian/evidence group or across entire case/matter.
Email discussion threads.
Integrates with both FTK® and AD Enterprise to streamline investigations for law enforcement, government and corporate labs.
Fully leverage the cutting-edge analysis capabilities of Forensic Toolkit® computer forensics software.
Produce responsive-only documents and email (reduced PST/NSF) in native format or an AD1 forensic archive, organized by custodian or as a single instance, with options to preserve the original folder structure.
Generate load files for export to popular third-party review tools, including Concordance, EDRM XML, Summation, iCONECT and Introspect.
Export to TIFF or PDF.
Transparent search history reporting.