Sherlock Forensics Android Acquirer and Analyzer

0 reviews

Sherlock Forensics Android Acquirer and Analyzer is a desktop mobile forensics tool for Windows, macOS and Linux that performs logical acquisition of Android phones and tablets over ADB and analyzes the extracted data in one workspace. A consent-gated helper app collects SMS, contacts, call logs, media, installed apps and more across selectable data categories, and 346 artifact parsers turn the records into reviewable evidence. Every artifact is hashed with SHA-256 for integrity, bootloader state is detected and logged, and examiners build court-ready reports on an editable page with five built-in templates, their own letterhead, time zone and any of eleven languages. Built by CISSP, ISSAP and ISSMP certified forensic examiners for law enforcement, legal teams and corporate investigators. Free tier for device checks; Forensic Edition is a one-time $399 USD licence with no subscription.

Sherlock Forensics iPhone and iPad Analyzer

0 reviews

Sherlock Forensics iPhone and iPad Analyzer is iOS forensic software for Windows that acquires and analyzes iPhone and iPad logical (MobileBackup2) backups and analyzes Cellebrite UFED and Inseyets full-filesystem extractions. It is read-only, court-defensible and fully offline, with 200+ artifact views covering messages, calls, contacts, Safari history, Apple Notes, Maps and Waze, and more, plus offline decryption of encrypted backups and recovery of deleted records where they survive. The Forensic Edition adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, a raw SQLite browser and file extraction. EV code-signed and SHA-256 verifiable. Built by CISSP, ISSAP and ISSMP certified forensic examiners as a Cellebrite and GrayKey alternative for law enforcement, legal teams and smaller forensic firms. Free tier previews 25% of artifacts; Forensic Edition is a one-time $599 USD licence.

Sherlock Forensics Disk Imager

0 reviews

Sherlock Forensics Disk Imager is a free forensic disk imaging tool for Windows 10 and 11 that writes raw (dd) and E01 images and, unlike FTK Imager and Guymager, resumes interrupted E01 acquisitions with digest continuity instead of forcing a start-over. A pipelined engine reads, hashes, compresses and writes in parallel for roughly 3x the throughput of serial imagers (231 to 751 MB/s measured on E01 with SHA-256, SHA-1 and MD5). Three-pass SHA-256 verification, optional SHA-1 and MD5, segmented dd output for FAT32 and exFAT destinations, and built-in chain of custody fields produce a manifest ready for court. Safety controls refuse to write an image to the drive being read, and a live mission control console shows an entropy-shaded drive map, streaming hash lanes and throughput in real time. Single executable, built by CISSP, ISSAP and ISSMP certified forensic examiners. Free.

Sherlock Forensics Recover

0 reviews

Sherlock Forensics Recover is data recovery software for Windows 10 and 11 that measures instead of guessing. Where most recovery tools save a carved file at the largest possible size, so a 20 KB photo comes out as hundreds of megabytes that nothing can open, Recover reads the true length from the file itself and tells you whether each result was measured, located by signature or placed by assumption. It flags files that have most likely been overwritten rather than presenting them as recoverable, proves a RAID layout against the data before trusting it, correctly locates deleted files on large FAT32 volumes such as SD and camera cards, and never writes to the drive being rescued. Quick and deep scans (deep scans carve unallocated space by file signature), a self-contained HTML report that works offline, and Pro pagefile analysis for strings, URLs, paths and credentials. Small EV-signed, SHA-256 verified installer, built by CISSP, ISSAP and ISSMP certified forensic examiners. Free download; Pro is $295.

Sherlock Forensics PDF Viewer + Editor

0 reviews

Sherlock Forensics PDF Viewer + Editor is a PDF investigation platform for Windows that never executes what it finds. A pure Rust parser opens files without running JavaScript, URLs or launch actions, and visual rendering only happens when you click Render, so suspicious or hostile PDFs can be examined safely. A Redaction Lie Detector recovers text hidden under failed redactions, Tampering Signatures run 14 forensic tells to detect document alteration, and a Forensic Narrative Engine writes plain-English case-note summaries of what it found. 22 forensic inspection panels, batch folder scanning and PDF-to-PDF structural diff help examiners, lawyers and investigators compare versions and spot changes. Zero telemetry, single executable. Free to view, inspect and investigate; Pro at $29 per year adds annotation, page management and stamps, making it a lightweight Acrobat alternative for legal and forensic work.

Sherlock Forensics PST Viewer

0 reviews

Sherlock Forensics PST Viewer is a free PST and OST viewer for Windows, macOS and Linux that opens Outlook archives without Outlook or Office 365. Drop in a PST or OST file to browse folders, search messages, view attachments and export emails; it also opens modern OST, MSG and EML files. Everything runs locally, including the built-in AI analysis, and nothing is sent to the cloud: the licence check runs at startup before any evidence is opened, and while a case is loaded the app touches the network for nothing at all. EV code-signed and SHA-256 verified, with no signup required. Built by CISSP, ISSAP and ISSMP certified forensic examiners for investigators, eDiscovery and legal teams, IT staff and anyone recovering old mailboxes. Free; the Forensic Edition is $67 and one licence activates on both Windows and macOS.