Hibernation Recon
Hibernation Recon has been developed to support memory reconstruction from Windows hibernation files. It can identify and extract massive volumes of information from the multiple types (and levels) of slack space that often exist within them.
Cost / License
- Freemium (Subscription)
- Proprietary
Platforms
- Windows
Features
Tags
- digital-forensics
- forensics
- Hibernation
Hibernation Recon News & Activities
Recent activities
Hibernation Recon information
Developed by
Arsenal ReconLicensing
Proprietary and Freemium product.Pricing
Subscription that costs $49 per month + free version with limited functionality.Alternatives
3 alternatives listedSupported Languages
- English
What is Hibernation Recon?
The tools and techniques used for many years to analyze Microsoft Windows® hibernation files have left digital forensics experts in the dark… until now!
The exploitation of Windows hibernation files to “look back in time” and uncover compelling evidence is crucial to digital forensics practitioners. Hibernation Recon not only supports active memory reconstruction from Windows XP, Vista, 7, 8/8.1, 10, and 11 hibernation files, but also extracts massive volumes of information from the multiple types (and levels) of slack space that may exist within them. Additional features of Hibernation Recon include the automatic recovery of valuable NTFS metadata and parallel processing of multiple hibernation files. Digital forensics practitioners cannot afford to analyze electronic evidence without extracting maximum value from Windows hibernation files.