Guides

Training and reference

Worked procedures for 76 situations, and the complete command reference for every product: 290 commands and 1315 parameters, each with the business condition for using it. Generated from the shipping build, so it describes the version you have.

76worked scenarios
290commands documented
1315parameters explained
269file types recovered
Scenarios

Start from the situation, not the switch

Each entry states which product covers it, which workspace to open, the procedure with the reason for each step, the exact commands, the options that apply and the condition for each, and the honest limit.

Which feature do I need? How to do the job, step by step All 76 scenarios When you need hardware help In the app, no command line

The Academy: learn by playing

Standards-aligned training

Eight modules across the four phases of NIST SP 800-86, aligned to ISO/IEC 27037, SWGDE, ASTM E2916 and E3016, NIJ guidance and Federal Rules of Evidence 702 and 902(14). Each module states what you must have, what you do, what it produces for the case file, and where it stops.

Open the training Operator course

Coverage in detail

File systems, image formats, RAID and pool types, database engines and forensic artefacts, listed in full, with a category comparison against the products a lab would otherwise buy.

Coverage tables