ForensicSoft released an updated version of its Windows-based computer forensic sofware SAFE, Version 1.1, during the Techno Forensics & Digital Investigations Conference.
SAFE is a write-blocked Windows forensic boot platform that helps computer forensic experts "confidently acquire, preview and analyze digital evidence to be presented in a court of law," according to the company.
All registered customers of SAFE Version 1.0 are eligible to download Version 1.1 from their account. It became available Nov. 4. The latest version includes improved device driver detection and support, as well as additional logging capabilities.
In addition, specific feature enhancements include notification during device detection if a driver cannot be loaded for a disk or network controller, SAFE Minimal Boot Mode to boot x86 devices with as little as 256MB RAM, SAFE USB for building a USB Boot Disk using the latest version of SAFE, and SAFE Tools that supports international date/time formats, and other feature enhancements.
ForensicSoft's SAFE platform doesn't use mounting drives as read-only; rather, it employs the company's proprietary SAFE Block software technology to block all disks at the physical level to ensure a forensically sound preview, exploration and capture of the digital evidence, according to the company.
The digital evidence remains unaltered during the SAFE exploration and acquisition, and therefore is reliable and defensible when presented during litigation. SAFE Block technology has passed the U.S. National Institute of Standards (NIST) test criteria.
SAFE uses Microsoft Windows PE and runs Windows-based forensic tools such as FTK, EnCase, X-Ways and others.