As of January 2010 Mares and Company will no longer be selling the Maresware software.

The software is supplied AS IS with no warranty of usability, reliability or correctness. It will be the users resonsibility to determine if the software meets their needs.

Direct links to software and help pages
Files A-C  |  Files D-F  |  Files G-K
Files L-O  |  Files P-S  |  Files T-Z

As of July 2005, Dan Mares has joined the forensic team at The NorcrossGroup.com as the Program Director of Forensics Development. Therefore all requests for forensic services should be directed to the Norcross Group.
 

For security purposes, the Maresware suite of software is only available to selected individuals.
If you have need for the software, or have questions relating to Maresware software call 678-427-3275.

Some of the software is available at the ftp site. But may be limited in use. The user of any of the software assumes all liability and responsibility for its use.

The software is supplied AS IS with no warranty of usability, reliability or correctness. It will be the users resonsibility to determine if the software meets their needs.

Top

 

As of January 2010 Mares and Company will no longer be selling the Maresware software.

Craig Ball is one of the most knowledgeable and experienced trial attorneys in the field of electronic/digital evidence and e-discovery. Check out his articles on this page. Craig Ball articles

Voting
and election officials take note:
Maresware SHA_V.exe is validated to FIPS 180-3 (SHA-1) hash. Consider using this as part of your voting software (or other) validation method.

What's New: Software
If you wish to go directly to the anonymous ftp site, in a real browser, use this URL
ftp://anonymous @ dmares.com @ dmares.com
and your e-mail is your password.

(9/2009) RECYCLED_I. A program to take the $I files from the VISTA $RECYCLED bin, and produce a delimeted output of the metadata of the deleted files.

(4/2009) (ACCESS.exe) A simple program describing where to find the last access date update key, and it also shows if the computer you run it on has that key set or not. Download: ACCESS.exe  password is your e-mail address.

(4/2009) (VSS.exe) A simple program to mount an XP, VISTA, SERVER, Volume Shadow Copy as a logical drive letter. This allows the examiner to see a drive as it was then, not as it is now. Download: VSS.exe  password is your e-mail address.

Download: URL_SRCH  password is your e-mail address.
URL_SRCH is a program which finds files that contain IP addresses, e-mail addresses, and URL formats. It then provides a list of those files for the user to act upon.