What's new

Welcome to Free download educational resource and Apps from TUTBB

Join us now to get access to all our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, and so, so much more. It's also quick and totally free, so what are you waiting for?

ElcomSoft Quick Triage 2.01.193

TUTBB

Active member
Joined
Apr 9, 2022
Messages
187,608
Reaction score
19
Points
38

ae793eb56eaa3eff7e22392892500487.webp


ElcomSoft Quick Triage 2.01.193 | 98 MB

ElcomSoft Quick Triage is a professional digital forensics solution designed to rapidly collect, extract, and analyze critical evidence from Windows computers and storage devices. Built for forensic investigators, incident response teams, and law enforcement professionals, it enables fast identification of valuable artefacts during both on-site investigations and laboratory examinations.

By focusing on the most relevant forensic evidence, Quick Triage helps investigators quickly determine how a system was used, who accessed it, what activities were performed, and when those events occurred.​

Key Features

• Rapid acquisition and analysis of Windows forensic artefacts.
• Examine live systems, user profiles, and mounted disk images.
• Extract saved passwords, credentials, and security-related information.
• Analyze browser history, search activity, downloads, and stored logins.
• Recover documents, recent files, and Recycle Bin contents.
• Review email client and instant messaging data.
• Identify connected USB devices, printers, displays, and external hardware.
• Analyze Windows Event Logs, Prefetch, Shimcache, SRUM, Task Scheduler, crash reports, and application execution traces.
• Collect Windows Vault entries, DPAPI data, certificates, cryptographic keys, and credential stores.
• Preserve evidence with complete source attribution and contextual information.
• Optimized for fast triage without requiring a full forensic examination.

What's New in Version 2.01.193

• Added offline decryption support for Chrome and Chromium-based browser passwords protected with ABE.
• Added support for browsers using master passwords, including Firefox, Yandex Browser, and other Gecko-based browsers.
• Added support for Microsoft Accounts and Microsoft Entra ID.
• New high-speed Event Viewer for EVTX log files.
• Added fast CSV export functionality.
• Added portable version creation.
• Added "Data Only" source type for unknown operating systems.
• Added source data mapping within project containers.
• Added support for selecting files and folders to include in forensic containers.
• Added disk space estimation before project creation.
• Added Recent Projects menu.
• Improved project container format for faster performance and indexing.
• Enhanced Lucene indexing engine with reduced storage usage and faster searches.
• Improved offline file detection and global search performance.
• Implemented Windows Defender compatibility workaround.
• Improved handling of systems with Memory Integrity enabled.
• Fixed Smart Folder field mapping and naming issues.

Supported Evidence Sources

• Windows Event Logs
• Browser history and saved credentials
• Windows Vault
• DPAPI secrets
• User profiles
• Documents and recent files
• Recycle Bin
• USB device history
• Email clients
• Instant messengers
• Application execution artefacts
• System logs
• Mounted forensic images

System Requirements

• Windows 10
• Windows 11

Homepage

Code:
https://www.elcomsoft.com/eqt.html


Recommend Download Link Hight Speed | Please Say Thanks Keep Topic Live
Links are Interchangeable - No Password - Single Extraction
 
Top Bottom