As of July 2005, Dan Mares has joined the forensic team at The NorcrossGroup.com as the Program Director of Forensics Development. Therefore all requests for forensic services should be directed to the Norcross Group.
 

TRAINING

Mares and Company has merged its training function with that of the Norcross Group. Please contact the Norcross Group for your training needs.

The classes originally offered by Mares and Company are now offered at by the Norcross Group training section.

The Norcross Group with its talented staff will be happy to fullfill your training needs in computer forensics, electronic evidence discovery and analysis; data and password recovery; hard drive imaging and wiping; Expert Witness services and litigation support; and much more.

Software

The Maresware suite of software is only available through Mares and Company. If you have questions relating to Maresware software call 678-427-3275.

Maresware: The Suite
Maresware: Linux Forensics
Validation Tools and other products
Hash Set CD
Free Software
Help files for Maresware

Our software includes programs for:

• computer forensics(also for Linux)
• incident response
• computer investigations
• data analysis and auditing
• drive wiping for reuse, retirement, or compliance with HIPAA and other information privacy regulations (see Declasfy)
• data/software/hardware validation tools (see Hash and Hashcmp)
• ownership identification of hard drives for inventory or for theft/ loss recovery
• systems maintenance; IT management
• Bates numbering of filenames for e-discovery.
• plus many more applications

Services

All of the following services are now performed by the Norcross Group

Forensics, Consulting, Litigation Support: Electronic data discovery and evidence analysis; expert witness testimony,litigation support, Bates numbering of file names for e-discovery, computer security consulting; hard drive imaging.

Data recovery; password recovery: hard drive imaging; hard drive wiping.

Data analysis; development of forensic and data processing protocols; assistance with legacy data transformation.

Custom Processing Protocols are available as a service to our non-contracting clients. We develop a complete processing protocol, with sequential procedures and batch files, to expedite your data analysis projects. Usually can be handled quickly, entirely by phone and email, at a very reasonable cost.

Custom Processing Protocol for data integrity on 911 Public Safety systems, and Voting Computer software.

Top

 

What's New: Software

Voting   and election officials, find out which Maresware programs you need, and how to use the hash sets can be used to validate voting machine software and other electronic records. (8/2004)

(2/2007) A simple program called seadate   to decode the date code on Seagate Hard Drives.

(10/2006) A simple ROT13 conversion utility. This program takes a file and performs a ROT13 conversion on the data.

(1/2006) Read an evaluation of the HPA detecting and removing software

Download: URL_SRCH   URL_SRCH is a program which finds files that contain IP addresses, e-mail addresses, and URL formats. It then provides a list of those files for the user to act upon. (4/2005)

SSN_valid   is a program which attempts to confirm the validity of an SSN. Can take text input files. (12/2004)

MAK_HTML   is a program which links all the files in a specified folder to an index.htm file which can be used to "browse" the identified files. (12/2004)

NTImage is now available. It is designed to image under the NT (W2K, XP) operating system(s). (5/2004)

NT_SS is available as a beta program. It is designed to perform sector string searches under the NT (W2K, XP) operating system(s). It can be used to confirm drive wiping programs functionality. (6/2004)

Declasfy is available on a bootable CD. For site licensing and those without floppy disk drives and can identify and delete HPA (Host Protected Area) of a drive. (12/2003)

Maresware Hash Set CD: The January 2005 (ver. 2.15) hash over 12 million known file hashes but with the output as fixed length records--ready for further processing. Very fast: check our statistics!

New: Maresware Updates

The latest...

Hash (1/2004) Can insert a comment field at the beginning of every output record. Useful for adding the computer UNC name, or other identifying comment.

More new free programs

Online Ordering & Registration

Now you can order most of our products or register for training online. (A service added at your request.) Find the Order:online link with the items you want to order. The link is also available near the bottom of the left navigation bar on every page.

Know what you want already? Then go directly to Order: online now.

Training

Provided by Dan Mares and members of The Norcross Group

• Using Maresware software
• Computer forensics--Basic
• Computer forensics--Advanced

Dan Mares, founder and President of Mares and Company, LLC was one of the pioneers in the development of the field of computer forensics. He helped develop and deliver training programs for the original SCERS course at FLETC and for the Data Recovery classes at National White Collar Crime Center. He has served as an instructor and speaker at a wide variety of professional organizations, colleges and universities, private corporations and law enforcement training institutes.

Dan also developed Maresware and uses it in his own consulting services practice. He develops all the training programs presented by Mares and Company and usually serves as lead instructor. Please see About Dan Mares to learn more about Dan Mares and Mares and Company.