Hibernation Recon icon
Hibernation Recon icon

Hibernation Recon

 1 like

Hibernation Recon has been developed to support memory reconstruction from Windows hibernation files. It can identify and extract massive volumes of information from the multiple types (and levels) of slack space that often exist within them.

Hibernation Recon screenshot 1

License model

  • FreemiumProprietary

Platforms

  • Windows
  No rating
1like
0comments
0news articles

Features

Suggest and vote on features
No features, maybe you want to suggest one?

 Tags

Hibernation Recon News & Activities

Highlights All activities

Recent activities

Show all activities

Hibernation Recon information

  • Developed by

    Arsenal Recon
  • Licensing

    Proprietary and Freemium product.
  • Pricing

    Subscription that costs $49 per month + free version with limited functionality.
  • Alternatives

    3 alternatives listed
  • Supported Languages

    • English

Our users have written 0 comments and reviews about Hibernation Recon, and it has gotten 1 likes

Hibernation Recon was added to AlternativeTo by e2_e8 on Mar 9, 2018 and this page was last updated Nov 27, 2024.
No comments or reviews, maybe you want to be first?
Post comment/review

What is Hibernation Recon?

The tools and techniques used for many years to analyze Microsoft Windows® hibernation files have left digital forensics experts in the dark… until now!

The exploitation of Windows hibernation files to “look back in time” and uncover compelling evidence is crucial to digital forensics practitioners. Hibernation Recon not only supports active memory reconstruction from Windows XP, Vista, 7, 8/8.1, 10, and 11 hibernation files, but also extracts massive volumes of information from the multiple types (and levels) of slack space that may exist within them. Additional features of Hibernation Recon include the automatic recovery of valuable NTFS metadata and parallel processing of multiple hibernation files. Digital forensics practitioners cannot afford to analyze electronic evidence without extracting maximum value from Windows hibernation files.