:
ElcomSoft Quick Triage 2.01.193 | 98 MB
ElcomSoft Quick Triage is a professional digital forensics solution designed to rapidly collect, extract, and analyze critical evidence from Windows computers and storage devices. Built for forensic investigators, incident response teams, and law enforcement professionals, it enables fast identification of valuable artefacts during both on-site investigations and laboratory examinations.
By focusing on the most relevant forensic evidence, Quick Triage helps investigators quickly determine how a system was used, who accessed it, what activities were performed, and when those events occurred.
Key Features
• Rapid acquisition and analysis of Windows forensic artefacts.
• Examine live systems, user profiles, and mounted disk images.
• Extract saved passwords, credentials, and security-related information.
• Analyze browser history, search activity, downloads, and stored logins.
• Recover documents, recent files, and Recycle Bin contents.
• Review email client and instant messaging data.
• Identify connected USB devices, printers, displays, and external hardware.
• Analyze Windows Event Logs, Prefetch, Shimcache, SRUM, Task Scheduler, crash reports, and application execution traces.
• Collect Windows Vault entries, DPAPI data, certificates, cryptographic keys, and credential stores.
• Preserve evidence with complete source attribution and contextual information.
• Optimized for fast triage without requiring a full forensic examination.
What's New in Version 2.01.193
• Added offline decryption support for Chrome and Chromium-based browser passwords protected with ABE.
• Added support for browsers using master passwords, including Firefox, Yandex Browser, and other Gecko-based browsers.
• Added support for Microsoft Accounts and Microsoft Entra ID.
• New high-speed Event Viewer for EVTX log files.
• Added fast CSV export functionality.
• Added portable version creation.
• Added "Data Only" source type for unknown operating systems.
• Added source data mapping within project containers.
• Added support for selecting files and folders to include in forensic containers.
• Added disk space estimation before project creation.
• Added Recent Projects menu.
• Improved project container format for faster performance and indexing.
• Enhanced Lucene indexing engine with reduced storage usage and faster searches.
• Improved offline file detection and global search performance.
• Implemented Windows Defender compatibility workaround.
• Improved handling of systems with Memory Integrity enabled.
• Fixed Smart Folder field mapping and naming issues.
Supported Evidence Sources
• Windows Event Logs
• Browser history and saved credentials
• Windows Vault
• DPAPI secrets
• User profiles
• Documents and recent files
• Recycle Bin
• USB device history
• Email clients
• Instant messengers
• Application execution artefacts
• System logs
• Mounted forensic images
System Requirements
• Windows 10
• Windows 11
Homepage
https://www.elcomsoft.com/eqt.html
Buy Premium From My Links To Get Resumable Support,Max Speed & Support Me
Links are Interchangeable - No Password - Single Extraction