Paraben's P2 Paradigm Gets a Facelift

Paraben's P2 Commander is a comprehensive digital forensic tool designed to handle more data, more efficiently while keeping Paraben's P2 Paradigm of specialised focus of the entire forensic exam process.

P2 Commander utilises Paraben's advanced plug-in architecture to create specialised engines that focus on such things as E-mail, Network E-mail, Chat Logs, File Sorting, and more all while increasing the amount of data that can be processed and utilising resources through multi-threading and task scheduling.

New to v1.6

• Added support for Outlook offline storage (OST)
• Added 64 bit OS support
• Added support for ICQ 7
• Added support for the latest Trillian client
• Added additional Skype parsing (birthday reminders, sent files, etc.)
• Improved most plug-ins including file sorting, EDB and Groupwise processing, encrypted file detection, archive processing, reporting, IE file processing, and much more.

P2 Commander Features

• Back end Firebird database for support of massive amounts of data
• Multi-threading and task scheduling capabilities to process more data in less time
• Examine logical and physical disks
• Supports disk images from the most popular forensic imaging software
  • Paraben's Forensic Replicator (PFR)
  • Safeback 2-3
  • EnCase 4-5-6
  • RAW disk images
• E-mail plug-in supports multiple e-mail and network e-mail formats
  • Microsoft Exchange 5.0, 5.5, 2000, 2003 SP1 (EDB)
  • Lotus Notes 4.0, 5.0, 6.0, 7.0, 8.0
  • Novell Group Wise
  • Microsoft Outlook (PST)
  • AOL
  • The Bat! (3.x and higher)
  • Thunderbird
• Chat database plug-in supports many popular chat clients
  • Yahoo!
  • Skype
  • ICQ
  • Miranda
  • Hello
  • Trillian
• Forensic Sorter plug-in sorts data into relevant categories
• Hash database features can manage and Filter Out Common Hashes (FOCH)
• File viewers for hundreds of popular file formats
• Automatic detection of embedded data from supported file types (view e-mail archives, chat databases, disk image files, OLE storage, and archives from the exact place they are stored without having to add them to your case separately)
• Multiple reporting options for complete customisation
• Robust searching options including multi-encoding support
• Image Analyzer for pornographic image detection
• Integrated Internet Explorer cache parser
• Advanced Registry and System Analyzer

P2 Command Kit

Includes:

• P2 Commander (Which incorporates Chat Examiner, E-mail Examiner, Network E-mail Examiner, Registry Analyser, and Text Searcher into one program)
• Forensic Replicator
• P2 eXplorer

Forensic Acquisitions Made Easy

Bit-Stream Imaging of Hard Drives & Media

Electronic media can be the key to a case and nothing is more important than acquiring that data. Paraben's Forensic Replicator can acquire a wide range of electronic media from a floppy to a hard disk -- nothing is forgotten. Forensic Replicator images can be compressed and segmented and easily read into the most popular forensic analysis programs.

Forensically examine the most popular e-mail formats such as America Online (AOL), Outlook Exchange (PST), Eudora, and many others. Paraben's E-mail Examiner is one of the most comprehensive forensically sound e-mail examination tools available. E-mail Examiner quickly recovers deleted messages and folders. E-mail Examiner doesn't just recover e-mail in the deleted folders; it recovers e-mail deleted from deleted items (deleted/deleted).

E-mail Examiner has been integrated into the P2 Commander interface. This means comprehensive analysis features, easy bookmarking and reporting, advanced Boolean searching, searching within attachments, full unicode language support, and a familiar and easy-to-use interface.

PROGRAM FEATURES:

• Supported File Types
  • America On-line (AOL)
  • Microsoft Outlook (PST, OST)
  • The Bat! (version 3.x and higher)
  • Thunderbird
  • Outlook Express
  • Eudora
  • E-mail file (EML)
  • Windows mail databases
  • Support for more than 750 MIME Types and related File Extensions
  • Plain Text mail
• Recovers Deleted E-mail From:
  • Outlook (PST)
  • Thunderbird
  • The Bat!
• Viewing Mailstorages
  • View the entire e-mail mail storage structure including restored folders
  • View messages, including deleted e-mail, in different formats (RFC Header, Text, RTF, HTML, and Raw HTML)
  • View and analyze attachments in their original file format as well as text or hex view
• Advanced Boolean Searching - Search in the text body, text headers, by sender, receiver, date, etc.
• Search in Attachments
• Print Attachments
• Sort Attachments by File Type (Forensic Sorter)
• Exporting
  • Export mail storage contents to EML, EMX, PST, and MSG formats
  • Export attachments in their native format
  • Batch search and export without adding mail storages as evidence to EMX
  • Export from search results and bookmarked data
• Batch "scripting"
• Comprehensive bookmarking and reporting

Forensic Analysis of Network E-mail Stores

With Network E-mail Examiner, you can now thoroughly examine Microsoft Exchange (EDB), Lotus Notes (NSF), and GroupWise e-mail stores. No longer will you have to be stuck in a long and painstaking restore process, simply run the main archive files and follow the instructions and eureka you've got mail. Network E-mail Examiner is designed to work hand-in-hand with E-mail Examiner and all output is compatible and can easily be loaded for more complex tasks.

FEATURES:

• Supports GroupWise information stores up to 8.0
• Supports Microsoft Exchange information stores 5.0, 5.5, 2000, Exchange 2003 & 2007 (.EDB)
• Supports Lotus Notes information stores 4.0, 5.0, 6.0, 8 (.NSF)
• Easy to use interface
• Advanced searching options
• Search in Attachments
• Print Attachments
• View one or all individual e-mail accounts in information store
• View all meta-data within individual messages
• Complete Bookmarking
• Export data for review in Paraben's E-mail Examiner
• Summary HTML reporting
• Sort Attachments by File Type (Forensic Sorter)
• Exporting
  • Export mail storage contents to EML, EMX, PST, and MSG formats
  • Export attachments in their native format
  • Batch multi-perameter search and export without adding mail storages to NEMX
  • Export from search results and bookmarked data
• Output to MSG & EML format
• Supports Deleted--Deleted recovery with Exchange
• Includes a free one year subscription with purchase