Forensic Products
Forensic Toolkit (FTK) version 1.81.6
MD5:1c65061b9e0abe0c3e71dd85bb75fb13
Registry Viewer 1.6.3
MD5:99383d2c8c4d574947ebdeb2aebf06d2
Mobile Phone Examiner
Mobile Phone Examiner Plus (MPE+) 4.7.0
Release Notes
User Guide
Quick Install Guide
FAQs
MPE+ Supported Devices
MPE+ Training Videos:
Introduction to the MPE+ Tablet
Installing MPE+
MPE+ Logical Imaging of Android Devices
MPE+ Extracting Protected User Data (Forensic Files) from Android Devices
MPE+ Physical Imaging of Android Devices
MPE+ Logical Imaging of Apple Mobile Devices
MPE+ Physical Imaging of Apple Mobile Devices
MPE+ Logical imaging of BlackBerry devices
MPE+ Logical imaging of iDEN Devices
MPE+ Logical imaging of Windows Mobile Devices
MPE+ Creating a Forensic SIM
NOTE: To perform full forensic analysis of a physical iOS image created in MPE4.3 and above, examiners must use FTK 3.3 or above.
NOTE: We are frequently adding new supported phones. Please refer to the links above often for updates to the User Guide and to the list of Supported Devices.
Upgrading Customers: Before upgrading to MPE+ 4x, you must follow the upgrade instructions in the Release Notes.
MPE+ Investigator v4.7.0
AD Triage
AD Triage 1.2.1
MD5:7d0fb7efda29007c2559fd77892271f1
Decryption Products
Password Recovery Toolkit (PRTK) version 6.6.1
MD5: 28563bc8ff850b575fac44495a07edae
Distributed Network Attack (DNA) version 3.6.1
MD5: cf220f9c996fe9666dfb7ccc4336d880
Portable Office Rainbow Table (PORT) version 2.0.3
MD5: 65a8829c2a84b4a1d2c4fbcdae0be03f
Decryption Modules
NOTE: There are no updates for the current version of DNA/PRTK, refer to previous release section for updates for older DNA versions.
FTK Imager
FTK Imager version 3.1.0
MD5: cac6e94e49e8844e2054106b2de764c8
NOTE: Full version - installation required. Imager 3.1.0 fixes the problem that occurs when trying to preview files when Internet Explorer 9 is installed.
FTK Imager Lite version 2.9.0
MD5: b1ace199216000f350ad46de02965230
NOTE: Minimum files necessary to run program - no installation required
Command Line Versions of FTK Imager
Debian/FTK ImagerCLI 2.9.0_Debian.tar.gz
Fedora/FTK ImagerCLI 2.9.0_Fedora.tar.gz
Win32/FTK ImagerCLI 2.9.0_Win32.zip
Supports Windows XP and later
Mac/FTK ImagerCLI 2.9.0_Mac.zip
Supports Mac OS 10.5 and 10.6x
Utilities
Known File Filter for FTK 4.0 Oracle Users
MD5: 7d785271c2917655a7fc22796aaf835d
Known File Filter for FTK 4.0 Postgres Users
MD5: 1b9196b5d6490b81853b4379ae47ccda
Known Filter Library File for FTK 3.4 Oracle Users
MD5: daacec3dac4997a6d0d29e3e2623021e
Known Filter Library File for FTK 3.4.x Postgres Users
Known Filter Library File for FTK 3.3 Users
MD5: 93026d3dfca19f7d20ac3ea56f5c79e7
Known Filter Library File for FTK 3.2 Users
MD5: 624e5dd4e2b14e185d2cd955458512be
Known Filter Library File for FTK 3.1 Users
MD5: e3cbfc4d5827ae21e4ba030ad49dd5f2
Known Filter Library File (empty file)
NOTE: The KFF library is for FTK 1.x only.
MD5: 834CA61EC0FE6C3C1B9C94A9CB5BB89D
Known Filter Library File version 29_sep_2008
MD5: beaeed647c62a332a10f112862645b29
NOTE: The KFF library is for FTK 1.x only.
Network License Server (NLS) version 3.2.1
MD5: 010e49a4a8efcaba3c7823308136d84c
Oradjuster
NOTE: Oradjuster utility to help optimize Oracle installations for processing.
License Manager version 3.1.3.61
MD5: 358bfaa573e59bc45ec1b6370eaea6e7
Oracle Critical Patch Update 45
Optional (but recommended) patches for the Oracle Database
MD5: 245094711bd42103cc4928096f281b54
Oracle Critical Patch Update 38
Optional (but recommended) patches for the Oracle Database
MD5: 1f30ac2683e875ea61c8d536c92fdb1b
Live Response
Dongle Drivers CM Stick (Silver)
Keylok (Green)
Dongle Driver (WinXP 32/64-bit, Vista 32-bit) v1.6
MD5: AD2F679FC49FB2131FF0C9193C9F936F
Dongle Driver (Beta, WinXP 32/64-bit, Vista 32/64-bit) v1.7
MD5: E100E8ADC9A4EDE107D72C91E981A86F