Related Information:

ILookPI Features:

  • Data capture, analysis, investigation and dissemination
  • The most advanced imaging solution available
  • An easy-to-use interface
  • Five built-in, fast and thorough search engines
  • Built-in development environment
  • Built-in file viewers for hundreds of file types
  • The leading salvage engine
  • Extremely fast hash engines and automated data reduction techniques
  • Built-in e-mail store processing, searching and viewing
  • Filesystem, file and e-mail recovery
  • Multiple categorization features
  • Registry viewing and searching
  • Virus/Trojan search and identification
  • VMware virtual disk production from devices or images
  • Context dictionary production for password cracking
  • IVault data store preparation and production
  • Support for all common archive file formats
  • Deconstruction of evidentially useful file types
  • Sorting, grouping and filtering of files and e-mail.
  • Advanced analysis functions
  • Advanced MS Outlook e-mail recovery
  • Illicit image and movie detection
  • Password protected file detection
  • File password cracking

What Our Customers Are Saying:

"Thank you for the opportunity to be able to use ILook as an individual member of the [Non USA National Police agency]. ILook has proven that we can have successful convictions in some of our cases in [our country]. We would like to use ILook as a national standard and official forensic tool within [our country]."

- From the Chief of National
Police, Foreign Government

What We Do

This page as PDF

Evidence Collection Tools

The IXimager application is designed for advanced computer forensics professionals. It enables a user to quickly and efficiently create an exact, forensically sound, bit-by-bit duplicate of an entire target machine (an “image”) in an encrypted ASB format. It provides the ability to boot and image machines based on virtually any hardware and software combination.

Fusus is a live Windows application which allows a user to create a forensically sound physical or filesystem images without Administrator privileges and without software installation.

Data Review and Analysis Tools

ILook is a desktop application designed for advanced computer forensics professionals.  It enables a user to process, review and analyze digital media; ILook, Fusus, or IXimager evidence files; VMware VMDK virtual disks; or other legacy image formats.

IVault is a review tool for non-technical users such as case investigators, case reviewers, or attorneys.  These users can review evidence with a minimum of training, and no specialized understanding of the details of computer forensics.

ILookPI and IVault provide advanced features such as indexing and searching, and multi format file viewers to enable investigators to execute the quickest and most comprehensive analysis of the evidence possible.

Collaboration and Data Protection

Many members of the law enforcement community today, even skilled professional forensics specialists, lack an effective mechanism for secure electronic sharing of evidence files. As a result, they are forced to copy evidence files to physical storage media, and hand-deliver or mail that storage media to fellow team members. IXimager and Fusus both produce encrypted image formats which can be examined in ILookPI without prior decryption.   Additionally, ILookPI provides two types of system images that can be created directly from a mapped image of any system at hand or of a physical device separately.

Unique to this field, the investigator now can generate and distribute critical evidence or ediscovery results for review using IVault’s encrypted evidence stores.  The use of IVault allows the evidence, whatever the nature, to remain encrypted, and to be viewed on an IVault system without leaving retrievable traces on the reviewer’s system or otherwise contaminating the review machine or infiltrating it with harmful processes that are part of the evidence itself under examination.    There is an immediate safe harbor of the data and the use of the process automatically creates a protected “legal hold” environment within the science of computer forensics.