Frequently Asked Questions

How can I place an order?

You may place an order by visiting http://www.perlustro.com/purchase/store/ and selecting the desired products from the Perlustro Online Store. Our Sales group can also be reached via email at sales@perlustro.com.

I used ILook for several years until shortly before the end of 2008, but the Check License link says i’m not qualified for the current price, why not?

The current price is for currently active LEO licensees only.

When will the other sales groups be allowed to purchase ILookPI?

When the first LEO sales group support issues are understood and addressed by Perlustro. The time line is not fully predictable but sales groups may be opened concurrently.

Can I use a database other than MS Sql Server 2008 with ILookPI?

Not at this time

Can I continue to use ILook V8 after my current license expires?

ILook V8 licensing will discontinue at the end of the users license expiration date.

Will ILookPI open Ilook V8 or V7 evidence cases or control files?

No, because the form of the application base is changed so dramatically, there is no method to import previous case data into ILookPI. PI’s date requirements are not met by V8 control point data. Images created with IX2 however, can be opened as normal image sets and remapped within PI. All comparisons of findings we can test provide full validation for the same analysis of the same data in ILookPI as it was determined in V8.

What types of Images are created by IXimagerIII?

The same three forms of images created by IX 2, IDIF – a compressed image form, IRIF – a rawbit ILookPI centric form with no data segment compression, and IEIF a fully compressed and encrypted Evidence preservation form which protects the entire image envelope.

Will ILookPI convert images it creates or which IXimager creates, into other alternate image output forms?

Yes, it will create VMDK image sets directly from 5 specific image forms : the three images produced by IXimager, FUSUS created images, and ILookPI images.

I am new to ILook and ILookPI, what is the easiest way to learn to use the products?

The products come with very complete userguides and they include direct context sensitive help for all major functions. Any training in a major commercial forensics product will give a headstart to a beginning user of ILookPI if we presume the basics of computer forensics are known. The functions specific to the tool that require the most new user attention can be categorized generally in these areas : salvage of files or fragments in either freespace or filespace, search result analysis, filtering of object lists through the control interfaces, the use of virtual category assignments as a method of interactively working a case are all different in PI versus previous ILook Versions.

Will ILookPI work with an installation of SqlServer I already have on my network?

Possibly, but ONLY if it is SqlServer 2008. ILookPI is integrate into all Svr 2008 versions, but Svr 2008 is unique to the history of Sqlserver and ILookPI does not support the prior versions. During development, Server 2005 was used, but advanced technology available to ILookPI was only available within Svr 2008.

How can I reattach a broken Microsoft SQL Server database

Please see the following PDF for a complete description of the steps involved in this process.
Re-attach a broken database