Software

Software

CCL-Forensics is a digital forensics industry leader in research and development. It employs a dedicated team of programmers – all highly experienced in working with digital evidence – to create solutions to problems faced by digital investigators.

A selection of this software will be made available over the coming months. Our first tool, epilog (SQLite forensic tool) has already attracted huge interest from the digital forensic community. 

Our other software includes XML and plist parsing tool, PIP, our free .ipd deconstructor, Rubus and our web cookie analyser, Dunk! is our newest release. PIP and Dunk! are also available.

Software

Posted on Thursday, 05 May 2011

e without dropWelcome to epilog - a software tool which allows investigators to recover deleted data from the widely-used database format, SQLite.

Without epilog, you could be missing out on potentially valuable evidence.

Posted on Thursday, 28 July 2011

Welcome to PIP – a software tool which allows digital investigators to present often complex data from XML files - quickly and efficiently.

The tool also parses data from Apple’s property list file format – both in XML and binary format.

Posted on Friday, 16 September 2011

Welcome to dunk! – a low-cost tool allowing digital investigators to uncover potential new web activity evidence from locally-stored web cookies.

Dunk! puts web evidence into context and adds an extra dimension to investigations.

Posted on Friday, 04 November 2011

rubus_smallWelcome to Rubus – a free tool for digital investigators who need to reverse engineer BlackBerry data. Rubus deconstructs BlackBerry .ipd files into their constituent parts.

This lets you see all the raw data inside.

Other software & scripts

Posted on Wednesday, 15 February 2012

Here at CCL-Forensics we are constantly developing software and scripts to solve problems that may arise during forensic investigations. For example: what do you do if you have to examine an Android device which has a pattern lock enabled, but in which USB debugging is not initialised?