Internet Evidence Finder is designed to find Internet-related data or files on a hard drive as part of a digital forensics investigation. In this regard, the purpose of this application really contrasts the simplicity of its design. Normally when we think of forensics software, we imagine a very sophisticated application that only experts can use successfully. Nothing farther from reality: Internet Evidence Finder has a straightforward wizard-like interface in which a series of steps will take you through the whole process of finding Internet artifacts.
As the first step, the application will ask you to select the areas you would like to search. Then, you will need to provide the location by selecting drives, folders or files. Next, you will be prompted to select the items to search for. After this, you can choose a case folder (where the results will be stored) and provide search options. Finally, before proceeding to searching for evidence, you can enter information related to the case.
Once the application has finished searching, it will show a report of the found artifacts. The results can then be viewed or exported in several file formats. In addition, you can create an HTML report including all the artifacts or a selection of them.
In general, Internet Evidence Finder is a fine application whose real value is its being able to find Internet evidence. When I tested it, it really managed to find web browsing history even when the browser was used in InPrivate Browsing mode. However, I have one advice for the developers: some users, mostly highly specialized ones, take pride in their capability to deal with sophisticated software, and sometimes they disregard applications that do not meet these expectations. In my opinion, a little more air of sophistication would do no harm to Internet Evidence Finder. And just one more thing about this app: the support team is great!
Comments