Cellebrite UFED Touch Ultimate
Strengths: This device is easy to use, fast, portable and powerful. Weaknesses: A bit pricey for smaller organizations. Could use a direct export to a media forensic format, such as dd.
ADF Solutions Triage-G2
Strengths: Easy and quick to configure and use. Weaknesses: Collection speed was good, but for a very large suite of machines to be tested the process could become time consuming.
Cyber Security Technologies Mac Marshal
Strengths: These products make it easy to investigate a Mac, dual-boot or virtualized OS running on the Mac. Weaknesses: There is little documentation with the product or on the website to help users get started.
CRU WiebeTech Forensic ComboDock v5
Strengths: Fast and knowledgeable support team. Tool that performs as expected. Weaknesses: Perhaps a bit expensive for its feature set.
NIKSUN NetDetector/NetVCR Alpine 4.2.1
Strengths: Extremely simple and powerful. Excellent support from NIKSUN, including videos and tutorials on how to use the product. Weaknesses: Costly for some organizations, but worth it.
Technology Pathways ProDiscover Incident Response 7.4
Strengths: Simple setup, quick imaging, great support and ease of use. Weaknesses: Tradeoff of quick imaging with longer times to open specific folder/file paths.
HBGary Responder Professional
Strengths: The powerful tools included provide easy and insightful access to volatile memory. Weaknesses: Deployment and data acquisition could be optimized slightly. Can be pricey for general use in the average security department.
AccessData Forensic Suite
Strengths: A host of tools that enable a thorough and organized investigation. Weaknesses: Some of the software tools may not be quickly understood by beginners.
IntaForensics Lima Forensic Case Management Software
Strengths: Highly customizable, ensuring that the needs of both the public and private sector can be met. Weaknesses: Installation may be challenging for non-technical users without training.
Guidance Software EnCase Forensic v7
Strengths: A solid computer/media/mobile device forensic tool with a history of experience. Weaknesses: Can be dicey to set up in a network environment with multiple other products’ CodeMeter dongles running on a networked license server.