injungbo

Main Functions

• • Collection & Analysis Function

    Collection & Analysis Function

    User screen information

    User system status information

    USB connection history

    USB automatic imaging

    USB copy file details

    Bluetooth usage history

    Print history

    Keyboard usage history

    Installation program information

    File system change

    File list / Program execution history

    Specific folder Change history

    web browser usage history

    collection of specific emails

  • Forensic Analysis Function

    Forensic Analysis Function

    Remote Disk Imaging

    Remote Disk Analysis

    Windows File System Analysis

    Keyword and Pattern Search

    Various View Functions

    Disk Image Analysis Too

    File Time Series Analysis

    Deleted File Recovery

    Windows Artifact Analysis

  • 관리 기능

    Management Function

    Collection control by policy

    Investigator management

    Time series analysis of collected

    data (action analysis by time zone)

    Bookmark

    Investigation report creation

    File distribution history of multiple systems

• Collection & Analysis function

  Collect data of the subject of investigation through Qator Collector(collection server)
  
  Investigate the behavior of the subject of investigator through past and current screens of the subject PC
  

  • - Collected data varies depending on situation of the company

  • - Collect all contents from real-time investigation at the same time

  • - Screen information, file usage information, file name, USB usage history, Bluetooth usage history, events in PC, file system snapshot, installation program, webcam, printer log, printer spool data, specific path storage data, Internet history

  

• Forensic Analysis Function

  • Recovery of Deleted File

    - Recovery using the file system meta data

    - Data carving

    - Recovery of overwritten file

  • Recovery of Qator File

    - Remote file recovery through Manager

    - Recovery support using file system metadata

  • 

    Recovery using metadata

  • 

    Data Carving Recovery

  Search and analyze file contents containing specific words or pattern on PC
  
  Perform forensic analysis on PC remotely
  

  • Management Function

    - Report on results of forensic analysis

    - Document information on bookmark and the target of analysis

  

  • - Check what kinds of behavior took place on the subject PC at a specific time
  • - Display collected contents by time zone
  • - Enable correlation analysis between contents collected