ForensicSoft Announces new computer forensic tool – SAFE
Forensicsoft announces the release of its newest computer forensic tool, SAFE, the world’s first write-blocks Windows 
forensic boot environment. SAFE stands for System Acquisition Forensics Environment, is a new Windows-bases computer forensic platform exclusively designed to support the expanding needs of computer forensic, computer security, and litigation support professionals to confidently acquire preview and analyze digital evidence to be presented in a court of law.
SAFE uses Microsoft Windows PE, a fully licensed copy of which is included with the product. SAFE is capable of running your favorite Windows-based forensic tools such as FTK, EnCase, X-Ways, etc. Since SAFE is a Windows-based computer forensic platform, investigators have access to the widest array of drivers for existing computer hardware, and immediate availability of new Windows drivers for new computer hardware. Drivers can be added at any time during a SAFE session.
SAFE v1.0 is distributed as a CD-ROM, ISO download file, or USB bootable drive image, boots any X86-based computer from CD or USB drive. Upon boot-up, SAFE firmly locks-down the target computer with SAFE Block to ensure no mistaken write operations corrupt the target disk, then Windows PE is launched in a RAM disk on the target machine. Using the familiar Windows interface, disks and ports (USB, Firewire …) of the target machine can be easily unblocked or blocked throughout your investigation, with all events being logged and time-stamped. All of this is managed by the SAFE platform without removing or modifying the target machine’s hardware.
Specific benefits include:
- Write-blocking of all disk interfaces including SAS, RAID, Fibre Channel, and more.
- Natively supports NTFS and NTFS Compressed files systems, allowing examiners to write images faster and without file size limitations that exist with FAT.
- Familiar Windows interface requiring minimal training.
- Data capture and imaging at speeds of up to 4GB/min.
- Allows for non-invasive, forensically sound data capture of any target media.
