Forensic Images & Hard Drives

Index, Search and Extract Data from Forensic Images and Hard Drives

Collection of ESI in support of litigation often includes the capturing of users data by obtaining their entire hard drive, or taking a forensic image of this drive using tools such as Encase or Ghost. Indexing these hard drives and forensic images will allow for comprehensive search and collection of relevant content.

Index Engines indexes hard drives and forensic images by scanning the content quickly and efficiently.  All unstructured files, and email (including PSTs) can be indexed, searched and extracted in order to support discovery and management efforts.

The Index Engines platform is focused on providing comprehensive and efficient indexing of data across the enterprise. Regardless of format or location, our technology provides a unified index for access into your data assets, at unmatched speeds, scale and value. Contact us to learn more.

Applications                                                           

• Litigation Support – supporting requests from legal has never been easier.  Simple content and metadata search deliver deterministic results of all files and email contained on hard drives and forensic images. 

• Risk Assessment – understanding the contents of enterprise data allows for early review of sensitive information.  Search hard drive content at any time and determine a course of action based on the results.

  Features/Functions

• Direct indexing of unstructured files and email contained on forensic images and hard drives.  Support for Encase and Ghost forensic images.

• Full text and metadata indexing provides comprehensive search results of files and email (including PSTs).

• Indexes combine with network data and tape data indexes for a unified, deduplicated results set across online and office repositories.

• “Internet like” query tools using content and metadata search on network content to find and retrieve all relevant files and email.

• Extraction of search results from hard drives and forensic images.  All relevant content that is extracted is forensically sound.

• Unique document signature generated at indexing for dynamic deduplication query capability. Returns only unique files when searching, eliminating duplicate files and email.

• Dynamic classification of data based on query.  Execute a query and instantly generate a summary report based on the query result set.