Imaging software
The imaging software is designed to capture high volumes of computer data quickly and efficiently with absolute assurance of data integrity. The imaging process is independent of the file system(s) on the hard drive or diskette under investigation, and is recognised by courts around the world as the only valid means of capturing computer evidence.

Imaging software is supplied as part of our Imagers, Imaging Systems and Forensic Workstations. The features are detailed in the relevant pages:

• 16-bit legacy imaging software:
  "Dual DAT Imager" and "Diskette Imager".

• 32-bit high performance imaging software:
  "Remote Preview Pod & 32-bit Imaging Software", "Imaging Systems"
  and "Forensic Workstations".

• Indexing of all areas of a file system

• Indexing of areas outside of the file system: For example to allow the potential investigation of deleted partitions, high-level formatted drives, corrupted file systems, etc.

• File type identification and grouping.

• Automatic undeletion of deleted files.

• Creation of file hashes: To enable filtering during subsequent investigation.

• Creation of search index files.

• Handling of European character sets.

• Automatic handling of compressed volumes.

Investigation software
Having processed an image, the investigation software gives an effective and comprehensive tree view of all of the data from the hard drive or diskette. Using the powerful facilities built into the software, the investigator can quickly and easily search for computer evidence. The software is designed to be flexible and offers features such as:

• Easy to use interface: 'Explorer' style graphical user-interface.

• High speed text searching.

• Complex searching: By using Boolean operators.

• User-defined dictionaries: To simplify repeat searches.

• Filters: To streamline searches.

• Simultaneous searching of multiple images.

• Range of built-in file viewers: Original, raw text, by sector, by cluster, by timeline, as slideshow, etc.

• Viewing of all areas of the file system: Files, free space, slack space, etc.

• Viewing of undeleted files.

• File copying to logical volumes.

• File tagging and tag list management.

• Data trawling: For example to recover corrupt data files, lost fragments of files, deleted files (where no file record exists), etc.

• Remote preview of hard drive before imaging: When used in conjunction with the Vogon Remote Preview & Imaging Pod, the contents of the target or suspect hard drive can be examined with complete confidence that the data on the hard drive will not be changed.

• Reporting, saving and exporting options.

Support and training

• Technical Support: A dedicated support team at Vogon will provide email and/or telephone support to ensure any technical issues are handled promptly and effectively.

• Training: Full training on the use of Vogon products is available at Vogon's training centres in UK and Germany, or may be arranged at client's training facility.

If you do not have Adobe Acrobat it may be downloaded from Adobe's website here.