Logical File Backup
Offers full logical file backup capabilities for iPhone and iPad including automatic file hashing, known file analysis and file signature analysis.
Full iOS File and Application Analysis
Comprehensive application listing and file analysis including SMS, Voicemail, Notes, Call History Maps, Calendar, Contacts and more.
Deleted SQLite Record Recovery
Provides a proprietary deleted SQLite record recovery feature, working seamlessly with hundreds of iOS applications including SMS, Facebook, Voicemail, Call History, Calendar, Contacts and many more.
Active Files and Unallocated Space
Immediately identifies, separates and displays active files from those in unallocated space, enabling examiners to conduct a layered, nuanced, and comprehensive investigation.
Details, Details, Details
Automatically identifies all devices and partitions, offering summary details for each device, including the File System, Block Sector Count, Total File Count and more.
File and Extended Attributes
Automatically identifies and displays important extended attributes for each file and folder, including path, created, modified and last accessed dates. If available, fork count, physical/logical sectors and clusters are also included.
Positive File Hash Sets
Offers positive file hash sets for Mac OS X. The library includes Mac OS X versions 10.0.0 through 10.6.7, separating known system files from important suspect data.
Automatically identifies and displays all images, properly accounting for data and resource fork splits, providing Hex, Stings and Native view formats. Also offers numerous sorting options including skin tone analysis.
Pause... Then Start Again
Built in crash and pause recovery features, enabling the software to fit the investigator’s needs and timeline. If the system crashes or an investigator needs to pause for a break or emergency situation, simply stop and start your investigation exactly where you left off.
Automatically excludes all known system files, and filters specific folders and files by kind, extension, size, and created or modified dates.
Searches by keywords while including or ignoring specific extensions. Utilize a drop-down menu pre-populated with a number of regular expressions, including Mac Address, IP Address, Email Address, URL, Phone Numbers, Data, Postal Code and more.
Fully supports Safari, FireFox and Chrome browsers. Quickly view actual URLs and URL names within History, along with the categories and URLs of saved websites within Bookmarks. Also included are dates, times, URLs and possible text from searches within Cookies.
Fully supports iChat and Adium chat formats, automatically displaying active files with text content, dates, names and file sizes.
Traverses the Mac Mail Application directory structure for each user, displaying all mail account names and associated addresses while navigating for specific messages and content.
Offers uniquely flexible and intuitive reporting, offering investigators a new approach to quickly identifying and communicating the most important data to diverse audiences. In addition to quick file/folder tagging, BlackLight™ offers custom logo/report branding.