Dropbox Decryptor

Dropbox® Decryptor from Magnet Forensics is a free tool that will decrypt the Dropbox filecache.dbx and config.dbx files which are encrypted SQLite databases.

 

Encrypted Disk Detector

Encrypted Disk Detector (EDD) is a command-line tool that checks the local physical drives on a system for encrypted volumes created by TrueCrypt, PGP®, Bitlocker®, and other full disk encryption products.

 

Google Maps Tile Investigator

Google Maps Tile Investigator (GMTI) assists in putting more meaning around the Google Maps tile files left behind when viewing maps or getting directions on the Google Maps website.

 

IEF Logical Evidence File (LEF) Creator for EnCase v7

The IEF LEF Creator for EnCase v7 is an EnScript that creates an LEF from a pre-existing IEF case folder, enabling an examiner running IEF separately from EnCase to later incorporate the findings into EnCase v7.

 

IEF Evidence Processor Module for EnCase v7

This IEF Evidence Processor Module for EnCase® v7 is designed to integrate IEF with the EnCase v7 Evidence Processor.

 

IEF to EnCase v6 Connector

This Internet Evidence Finder™ (IEF) to EnCase® Connector was specifically designed for use with EnCase v6.

 

IEF to EnCase v7 Connector

This Internet Evidence Finder™ (IEF) to EnCase® Connector was specifically designed for use with EnCase v7.

 

Magnet RAM Capture

Magnet RAM Capture is a free imaging tool designed to capture the physical memory of a suspect’s computer, allowing investigators to recover and analyze valuable artifacts that are often only found in memory.

 

TSV to TLN Converter

The TSV to TLN Converter is a free tool from Magnet Forensics that converts the X-Ways generated TSV file into the TLN file format which can be loaded into the IEF Timeline View for visual analysis.

 

Web Page Saver

Web Page Saver (WPS) is a program that takes a list of URLs and saves scrolling captures (“snapshots”) of each page.