DriveLook is a powerful forensic drive investigation and search tool.
DriveLook scans a drive or a partition of a drive for text strings and stores these in a table. After completion of the scan you can browse this table and view the locations where the words had been found. The search function allows you to do fast fast inquiries for combinations of words.
Investigate a drive for suspicious content. See what others put on your computer. Find traces of user activity. Collect evidence for litigation purposes.
The program enables you to index a hard drive for all text that ever was written to it, browse a list of all words stored on the drive, search for words or combinations of words, view the location of words in a disk editor, switch between several views, such as hex and text view, use physical drives or logical drives as an input,?use image files as an input, access remote drives over serial cable or TCP/IP.
|