Maresware: Computer Forensics software provides an essential set of tools for investigating computer records and securing private information. It is highly flexible to meet the needs of all types of investigators including: law enforcement, intelligence agency, private investigator, corporate security officers, and human resources personnel. Used within a forensic paradigm, the software enables discovery of evidence for use in criminal or civil legal proceedings. Internal investigators can develop documentation to support disciplinary actions, yet do so non-invasively, to preserve evidence that could end up in court. IT managers can quickly wipe drives to DOD standards for reuse, retirement, or for compliance with HIPAA and other privacy of information regulations. Read more below about the software and its advantages:

• frequently used forensic functions
• special programs for loss-recovery, drive wiping. Bates numbering and file copying;
• key features: speed, capacity, control, flexibility, audit trail/examiner's log
• list and brief description of programs in the package

Some frequently used functions of Maresware: Computer Forensics

• discovery of "hidden" files(such as NTFS Alternate Data Streams)
• for incident response purposes
• evaluation of timelines
• powerful file key word searching and comparing
• files verification
• drive wiping for information privacy and security
• keyboard locking
• diskette imaging
• file reformatting
• documenting all the examiner's steps and procedures

Four programs of special interest from Maresware: Computer Forensics

• Declasfy --a superior disk wiping program that overwrites a physical hard drive to DOD standards. Prepare drives for reuse/retirement; secure the privacy of information to meet HIPAA and other regulatory requirements.
• Brandit --used to brand ownership information on a hard disk drive. Useful in tracing stolen hard drives.
• Bates_no --a unique program for adding identifying numbers to filenames in e-documents to prepare records for evidentiary use. Or simply use as a records management tool.
• Upcopy --a sophisticated copy program. Copies source files (directories) to a destination (directory), while maintaining full path and meta information (file dates/times). Excellent for maintenance purposes, or evidence discovery.

Top

Key Features of Maresware: Computer Forensics

• Speed and High capacity: Extremely rapid processing of files of virtually unlimited size (a design feature engineered through the use of highly-efficient C-programming and by the development of non-integrated, highly-targeted individual programs). Read our statistics on rapid processing.
• User Control: By selecting which program(s) to use, the user--not the software--determines each step of the analysis and specifies his preferred output format. All programs use similar command line options.
• Flexibility: Do streamlined single-step tasks or use any combination and sequence of programs for multi-step operations. Automate for unattended processing. Simplify repetitive tasks with familiar batch-file procedures.
• Documentation of examiner's procedures: Document a complete history of your procedures and findings at every step. Provide proof of the authenticity and integrity of the evidence.

Top

Learn more or Order now

To learn more about individual programs: read the Computer Forensics Software List and follow the links there for complete documentation, sample programs, or to purchase individual programs. If you already know the name of the individual program, go directly to it now by clicking on the appropriate alphabetical link at the bottom of this page(ex: Files A-C).

Maresware: Computer Forensics is a bundled set of over 25 related programs. Most programs can also be purchased individually. Site licenses and volume discounts are available. (Several of the individual programs are also available for Linux-- see (Maresware: Linux Forensics)

Order: online Maresware: Computer Forensics
Or go to our How to order page

Top

Customized Software, Training, and Related Services

Contact us with any questions or to discuss our custom software development and training services:

• Maresware programs can be customized for your special requirements
• we will develop a protocol for your specific task(Includes detailed instructions with all the steps and batch file procedures to accomplish a specific task. Read more at (processing protocols.)
• we provide training, on/offsite, to meet your needs

Because we use Maresware in our own consulting practice, we continuously add new features. Please let us know about any enhancements that would be helpful to you.

Top