ISeekImager

Introducing ISeekImager, the world’s most unique real time imaging system. ISeekImager is the only software of its type that makes encrypted physical or logical device images in a forensics certifiable form, without requiring software installation or Admin permissions on the subject machine.

ISeekImager provides unparalleled access to systems that are encrypted, or cannot be rebooted in a typical forensics process and are unavailable otherwise.

Disk encryption mechanisms like Bitlocker, Securedocs, Safeboot and others are accessible by API’s, but the largest distribution of Disk encryption currently is Truecrypt which has no access API at all. ISeekImager works in any and all of these systems, including Bitlocker, if they are running, and a logged on user currently is on the machine.  Or, where a machine can be booted with normal user status.

ISeekImager also provides clients the ability to define running temp file processes in real time, often active files not otherwise accessible, by allowing access to all data in real time, instead of post-boot analysis. Other methods require API’s because of system shutdowns that may be encountered, in addition to passwords that must be known post imaging, but ISeekImager requires neither. Even in Vista and System 7, the maximum requirement for ISeekImager to run may be knowledge of the Admin login account password. For the first time ever in the field of digital forensics, ISeekImager gives investigators the freedom of needing no installation on the system drive for imaging to occur.