Try Buy

Get answers faster.

Evimetry closes the gap between acquisition and analysis.
 

Complete acquisitions in the least time.

Evimetry cuts hours from acquisition times of SSD, NVMe, SAN and RAID systems, for traditional linear bitstream imaging. For example, an 1TB Macbook Pro can be imaged and verified in under 50 minutes.

Less time managing evidence.

Evimetry's multi-destination images copy into your in-lab evidence storage faster. On fast storage like RAID and SAN's, AFF4 images verify many times faster than traditional images.

Speeds up processing.

Your current forensic tools will process evidence faster using Evimetry's AFF4 images and the Filesystem Bridge.

 
 

All the features of Imager.

Evimetry Responder contains all of the features of Evimetry Imager.

Acquire more devices at once.

Proceed to analysis quicker. Streamlined acquisition of multiple local and remote multiple devices managed from a single pane. Comprehensive documentation is collected by default.

Start analysing physical devices immediately.

Examine and triage while you acquire bare metal devices and dead disks via our Deadboot agent. Leverage your preferred forensic toolset for live analysis and triage while you acquire, via a virtual disk device view of your live acquisition.

Spend less time acquiring irrelevant information.

Acquire only what you choose. Based on live analysis, widen the scope to include more in the image, or walk away with a partial physical image that contains everything that you have examined. The image is still compatible with your forensic toolkit.

Spend less time acquiring irrelevant information.

Acquire only what you choose. Based on live analysis, widen the scope to include more in the image, or walk away with a partial physical image that contains everything that you have examined. The image is still compatible with your forensic toolkit.

 
 

Start analysing live devices immediately.

Examine and triage while you acquire a remote live devices via our live agent. Leverage your preferred forensic toolset for live analysis and triage while you acquire, via a virtual disk device view of your live acquisition.

Spend less time acquiring irrelevant information.

Acquire only what you choose. Based on live analysis, widen the scope to include more in the image, or walk away with a partial physical image that contains everything that you have examined. The image is still compatible with your forensic toolkit.

Simple deployment.

Acquiring across WAN links is slow. Position evidence storage in locations close to target computers faster and more reliable acquisitions. For example, spin up an instance of the cloud agent in the same datacentre as a target server, or ship an appliance instance of the dead boot agent to a branch office.

 
 

All the features.

Evimetry Responder contains all of the features of Evimetry Remote and Evimetry Advanced Imager.

Fastest local forensics.

Evimetry is the world's fastest forensic imager. Evimetry Imager facilitates rapid acquisition of raw storage and storage found inside computers.

Fastest remote forensics..

Evimetry Remote enables rapid and reliable acquisition and analsysis of live computers. Supports Linux, MacOS, and Windows, on the LAN, across a WAN, or in the Cloud.