Forensic Image Enhancement Software Mac

Product Description

MacImager™ is a Mac OS X based drive imaging tool for securing evidence for further forensic analysis. Designed for the digital forensics and e-discovery professionals, the easy-to-use yet powerful tool allows investigators to secure evidence from drives or media in the form of disk images. MacImage is device and file system independent, and uses a proprietary fault tolerant acquisition to work around disk errors to obtain as much valid data as possible.

Oct 23, 2020 ProDiscover Forensic is a computer security app that allows you to locate all the data on a computer disk. It can protect evidence and create quality reports for the use of legal procedures. This tool allows you to extract EXIF (Exchangeable Image File Format) information from JPEG files. MacImager™ is a Mac OS X based drive imaging tool for securing evidence for further forensic analysis. Designed for the digital forensics and e-discovery professionals, the easy-to-use yet powerful tool allows investigators to secure evidence from drives or media in the form of disk images.

To support forensic needs of different forensic communities, MacImager supports MD5 hashing algorithm. Whether the drive or media is sound or faulty, MacImager is the only choice when it comes to forensics disk imaging.

MacImager disk imaging software uses a proprietary fault tolerant acquisition to work around disk errors to obtain as much valid data as possible. Whether the drive or media is sound or faulty, MacImager is the only choice when it comes to forensics disk imaging.

Complete device imaging: every sector of the device is copied. The software supports all file systems such as HFS, NTFS, FAT, FAT32, and Linux. MacImager works with USB key, PC disk, Linux disk, FAT32 disk, FLASH card, Digital Cameras, and almost any other media or file system that can be recognized in Mac OS X. Disk images created using the acquisition process with MacImager are saved in Apple’s standard DMG format and can be opened and read by many standard applications such as MacForensicsLab or Cache Detective for further analysis of the data.

Imaging a damaged hard disk or storage medium with bad blocks. When ordinary data acquisition tools encounter hard disk with bad blocks, most will try to read the bad block data repeatedly, and ultimately abandon the imaging process when the bad blocks cannot be read. More over, in the event of hard disk with multiple bad blocks, using hard disk read-write head and trying to read bad data repeatedly may cause the hard disk to heat up and damage. MacImager uses a special algorithm that can effectively address sectors with bad data, and recovers as much data as possible.

Written specifically for Mac OS X, MacImager includes powerful features that give a user excellent flexibility in imaging a volume or a device:

  • Image drive in device level.
  • Proprietary fault tolerant acquisition works around disk errors to create disk image.
  • Independent of operating system.
  • Support high-speed interface such as USB 3 and Thunderbolt.
  • MD5 HASH support.
  • Images acquired are saved in open ISO standard and can be read by many Mac applications.
  • Extremely easy-to-use interface. No special training necessary.

System Requirements:

  • OS X 10.6 (Snow Leopard) or above
  • Built for OS X Yosemite
  • Intel based Macintosh
  • Plenty of disk storage space

Forensic Image Enhancement Software Mac Download

  • What is FiA 64?

    FiA is a comprehensive software with analysis tools designed for forensic analysis and authentication of digital images. This extensive toolkit will allow the user to investigate the evidence and detect possible traces of tampering or other types of inconsistencies.

    FiA is used to systematically detect forged/doctored file based digital image evidence is able to authenticate and uncover where tampering and modification has taken place in a doctored image. This solution allows the expert to prepare everything needed for official court ready reports and all results are based on a forensic scientific methodology. FiA is a proven solution based on years of research. More research is being conducted to further extend software authentication capabilities to video authentication.

    FiA was developed for Law Enforcement Agencies only. In addition it is not effective to purchase this technology without the associated comprehensive training course.

The analysis tools in FiA 64 are scientifically peer reviewed and proven methods to detect image manipulation.

FiA 64 includes analysis tools that can only be found in here including Differential Mapping.

Have confidence with your results with the included 33 unique image authentication tools.

Load Images

Compatible with all standard image types: BMP, GIF, JPG, JPG 2000, PBM, PCX, PGM, PNG, PPM, RAS, TIF.

Structure Analysis

Compare an images data structure to detect if image editing software has been used.

EXIF Analysis

Extract EXIF data and reveal details such as camera brand, model, serial number, settings, editing/tampering software, etc.

JPG QT

Report and save Luminance and Chrominance Quantization Tables for JPG images.

JPG DCT

Reveal traces of JPEG recompression or indicate that the evidence image is consistent with an original.

Compression Level Analysis

Find possible traces of image re-compression, for each Red, Green, Blue (RGB) layer separately, and for their mean.

Color Filter Array

Explore the CFA interpolation process inside a digital photo camera to assess the correlation in each RGB layer.

G/B Screen

Look for traces of image inconsistencies left by green or blue screen removals by digital editing.

Color Spaces

Computes the RGB histogram that can be used to detect traces of previous brightness/contrast or histogram equalization.

Software
DCT Map

Reveal local traces of image manipulation like content aware or copy/paste between different images.

CL Map

Find local traces of image manipulation like content aware or copy/paste between different images.

CFA Map

Find local traces of image manipulation like content aware or copy/paste between different images.

Differential Map

Detect and display local inconsistencies due to image tampering processes.

Error Level Analysis

Computes the arithmetic difference between evidence image and a series of JPG re-compressed versions of it.

Adaptive Error Level Analysis
Forensic image enhancement software mac downloadSoftware

Computes the adaptive arithmetic difference between evidence image and a series of JPG recompressed versions of it using a unique algorithm.

Smart Error Level Analysis

Computes the smart adaptive arithmetic difference between evidence image and a series of JPG recompressed versions of it using a unique algorithm.

Ghost

Ghost analysis can reveal possible traces of image re-compression.

Correlation Map

Computes and displays the correlation between neighboring pixels and blocks of pixels. It can reveal local traces of image manipulation like content aware or copy/paste between different images.

Probability Map

Find the probability distribution between neighboring pixel blocks.

BA Map

Displays the blocking artifacts of image data.

ADJPEG

Checks for inconsistencies left by local tampering and double JPEG compression.

NADJPEG

Checks for inconsistencies left by local tampering and double JPEG compression nonaligned blocks.

Image Enhancement Software For Mac

Histogram Equalization

Applies histogram equalization on each Red, Green, Blue channel, and the overall RGB image.

Forensic Image Enhancement Software Mac

HP Filter

Detection of image tampering traces, like content-aware or copy/paste between different images. The HP analysis is based on Custom High Pass Filtering technique.

PRNU Residue

The digital camera's matrix (pixel sensor) is an optic to electric energy transducer. Its Photo Response Non-Uniformity (PRNU) can be used to detect copy/paste traces between images generated by different cameras or other types of image tampering.

Forensic image enhancement software mac pro
Clone Fusion

Automatic search for clones or copy/paste areas from the same image.

PRNU Camera

Verify the suspect camera and compare the evidence image against reference images with the same resolution.

Difference (Δ)

Computes the difference between evidence (A) and a reference image (B). The numeric results are displayed as: arithmetic absolute difference, correlation coefficient, and mean quadratic difference.

File Batching and Sorting

Runs all the authentication functions on a file. It will detect traces left by different image editors and other file structure inconsistencies, and copy the analyzed files in organized folders.

Customized Fast Batch

End users can customize the authentication functions performed on a file batch. Allowing only certain functions to be run.

Folder Batching

Forensic Image Enhancement Software Mac Os

Run file batching on multiple images in a directory.

Cognitech's FiA 64 is an addon product with TriSuite 64. It can be purchased alongside TriSuite 14. Please visit our purchasing page here

Phone: (626) 796-0326

Email: sales@cognitech.com