Paraben's P2 eXplorer allows you to mount a forensic
image (or Linux DD, RAW, or other drive images) and
explore it as though it were a drive on your machine
while preserving the forensic nature of your evidence.
This means that an image isn't just mounted to view
logical files, it is mounted as the actual bitstream
image, preserving unallocated, slack, and deleted
data. FEATURES: Mounts Paraben's Forensic Replicator
images (PFR). Mounts compressed & encrypted PFR
images. Mounts EnCase images (E01). Mounts SafeBack 1
& 2 images. Mounts WinImage non-compressed images.
Mounts RAW images from Linux DD & other tools.
Supports Dynamic drive images. Auto-detects image
format. Supports both logical and physical images
types. MD5 hash verification. Shell support for easy
mounting/unmounting. Write-protection for preserving
evidence. MD5 checksum verification. Supports mounting
over a network. Mount several images at a time.

Download (8005 KB) Website Link to this page