Paraben P2 Shuttle Pro

Part #: P-P2S

Inquire for Pricing

"The Incident Response Solution You've Been Looking For
Most enterprise incident response tools are simply too cost prohibitive. P2 Shuttle Pro gives you all the features you need and then some yet is affordable to purchase and maintain. Whether you have your own hardware or choose the P2 Shuttle Pro and Hardware Bundle, you can feel confident you have all you need to respond to an incident with proper forensic procedures. P2 Shuttle Pro is also vendor neutral meaning the data collected can be analyzed using standard forensic investigation software. You can also mount up network drives and use any vendor's software to acquire evidence. "

Paraben P2 Commander

Part #: P-P2C

$1,095.00

"Paraben's P2 Commander is a comprehensive digital forensic tool designed to handle more data, more efficiently while keeping to Paraben's P2 Paradigm of specialized focus of the entire forensic exam process. P2 Commander utilizes Paraben's advanced plug-in architecture to create specialized engines that focus on such things as E-mail, Network E-mail, Chat Logs, File Sorting, Internet file analysis and more all while increasing the amount of data that can be processed and utilizing resources through multi-threading and task scheduling. In short, when asked what P2 Commander can do, the answer is "almost everything". All this for an affordable price from a trusted digital forensics company. "

New to v1.6

• Added support for Outlook offline storage (OST)
• Added 64 bit OS support
• Added support for ICQ 7
• Added support for the latest Trillian client
• Added additional Skype parsing (birthday reminders, sent files, etc.)
• Improved most plug-ins including file sorting, EDB and Groupwise processing, encrypted file detection, archive processing, reporting, IE file processing, and much more.

P2 Commander Features

• Back end Firebird database for support of massive amounts of data
• Multi-threading and task scheduling capabilities to process more data in less time
• Examine logical and physical disks as well as individual files and folders with FAT12, FAT16, FAT 32, and NTFS filesystems (including partition free space and file slack)
• Supports disk images from the most popular forensic imaging software
  • Paraben's Forensic Replicator (PFR)
  • Safeback 2-3
  • EnCase 4-5-6
  • RAW disk images (created in P2 Enterprise, Smart, etc.)
• E-mail plug-in supports viewing multiple e-mail and network e-mail formats in a special e-mail data viewer (including support for exporting data to E-mail Examiner, EML [rfc822 compliant], Attachments only, MSG [OLE message], and PST [Outlook] e-mail formats)
• Microsoft Exchange 5.0, 5.5, 2000, 2003 SP1, 2007 (EDB)
• Lotus Notes 4.0, 5.0, 6.0, 7.0, 8.0
• Novell Group Wise
• Microsoft Outlook (PST)
• Microsoft Outlook Express (EML)
• E-mail Examiner (EMX)
• AOL
• The Bat! (3.x and higher)
• Thunderbird
• Chat database plug-in supports many popular chat clients for viewing chat database contents in a convenient, color coded format for easy analysis
  • Yahoo!
  • Skype
  • ICQ
  • Miranda
  • Hello (Including Thumbnails)
  • Trillian
• OLE Storage plug-in supports the parsing and analysis of any OLE storage
• Archive plug-in supports many popular archive types including: zip, jar, xpi, iso, chm, cab, msi, ppt, doc, xls, arj, bzip2, cpio, deb, gzip, lzh, msis, rpm, split, tar, z, wim, and 7z.
• Forensic Sorter plug-in sorts data into relevant categories
  • Sort Network E-mail Attachments
  • Sort E-mail Attachments
• Deleted data recovery from NTFS and FAT filesystems as well as from PST and The Bat! mail archives
• Hash database features can manage and Filter Out Common Hashes (FOCH)
• File viewers for hundreds of popular file formats
• Automatic detection of embedded data from supported file types (view e-mail archives, chat databases, disk image files, OLE storage, and archives from the exact place they are stored without having to add them to your case separately)
• Multiple reporting options for complete customization
• Robust searching options including multi-encoding support
  • Search within e-mail attachments
  • Search in the text body, text headers, by sender, receiver, date, etc. of e-mails
• Exporting
  • Export any file in its native format
  • Export mail storage contents to EML, EMX, PST, and MSG formats
  • Export e-mail attachments in their native format
  • Export from search results and bookmarked data
• Image Analyzer for pornographic image detection
• Integrated Internet Explorer cache parser
• Advanced Registry and System Analyzer

---

Paraben P2 Commander Kit

Part #: P-P2CK

$1,279.00

"Paraben's P2 Examination Process is an alternative way of thinking in computer forensics. P2 works hand-in-hand with the Paraben forensic tool line. P2 Examination Technology centers around P2 Commander and includes other specialized tools, each taking a different role in the examination. "

The process is simple. Complete a bit-stream image using Forensic Replicator or other supported imaging software and then begin the "divide and conquer" concept. P2 Commander is the powerhouse behind the P2 Paradigm. Starting with indexing evidence, P2 Commander's Firebird database allows for faster searching and vast amounts of data to be processed in a single case. The indexing uses the forensic sorting engine to categorize the data into different preassigned categories as seen on the chart. One of those categories is FOCH - Filter Out Common Hashes. This process can eliminate 20-30% of the drive data to known files, saving hours of time for the examiner. P2 Commander also has engines for advanced analysis of e-mail (including network e-mail stores), chat logs, and supports file viewers for over 225 common file types. The P2 Command kit includes software that focuses on other areas of an examination as well. P2 eXplorer allows you to virtually mount images as drives while protecting the image from being altered. Decryption Collection is an advanced password recovery suite. To analyze Windows registry files the Command Kit includes Registry Analyzer. Finally, Case Agent Companion has complete analysis, bookmarking, & note taking functions built in for a final report to be generated and a case to be closed.

Products and Training that make up the P2 Command Kit include:

• P2 Commander (Which incorporates Chat Examiner, E-mail Examiner, Network E-mail Examiner, Registry Analyzer, and Text Searcher into one program)
• Forensic Replicator
• P2 eXplorer
• 1 Year Maintenance Subscription
• 1 Dongle for P2 Commander

Paraben Forensic Replicator

Part #: P-FR

$189.00

"Electronic media can be the key to a case and nothing is more important than acquiring that data. Paraben's Forensic Replicator can acquire a wide range of electronic media from a floppy to a hard disk -- nothing is forgotten. Forensic Replicator images can be compressed and segmented and easily read into the most popular forensic analysis programs."

Paraben E-mail Examiner

Part #: P-EME

$399.00

"Paraben's E-mail Examiner is one of the most comprehensive forensically sound e-mail examination tools available. E-mail Examiner recovers more active and deleted mail messages than the leading competitor. E-mail Examiner doesn't just recover e-mail in the deleted folders; it recovers e-mail deleted from deleted items (deleted/deleted). With bookmarking and advanced searching features including multiple word & multiple phrase searching, examining e-mail has never been so simple and thorough. With the ability to examine AOL 9.0, PST files, and ability to examine over 14 other mail types, you'll have the right tool for e-mail examination in your toolbox."

Paraben Network E-mail Examiner

Part #: P-NEME

$799.00

"With Network E-mail Examiner, you can now thoroughly examine Microsoft Exchange (EDB), Lotus Notes (NSF), and GroupWise e-mail stores. No longer will you have to be stuck in a long and painstaking restore process, simply run the main archive files and follow the instructions and eureka you've got mail. Network E-mail Examiner is designed to work hand-in-hand with E-mail Examiner and all output is compatible and can easily be loaded for more complex tasks."

Paraben Porn Detection Stick

Part #: P-PDS

$99.99

"Paraben's Porn Detection Stick is a thumb drive device that will search through all the images on your computer, scan them for pornographic content, and create a report of suspected pornographic images. It even scans deleted images and Internet cache files so there's no hiding Internet activity. This means even if Internet Explorer cache files are deleted, many images can still be recovered and scanned for pornography. Best of all, no software is installed on the target machine so they don't know you've performed a search. You can even securely delete objectionable images. "

Protect your computer from unwanted pornography. Someone doesn't have to be seeking out pornographic images to contaminate your computer. In fact, many porn sites contain harmful viruses that can do more damage. The Porn Detection Stick offers you peace of mind that your system is clean of unwanted illicit or even illegal images.

Product Features:

• Portable
  Because the porn detection software is embedded in a USB thumb drive, you can easily take it anywhere and use it on any computer you own.
• Fast
  A search of a 500 GB hard drive with over 70,000 images takes only about an hour and a half. Imagine how much time it would take you to manually find and search that many images.
• Accurate
  The Porn Detection Stick uses advanced image analyzing algorithms that categorize images as potentially harmful by identifying facial features, flesh tone colors, image back grounds, body part shapes, and more. With less than 1% false positive indications, your search for contamination on your computer won't waste your time.
• Deleted Data & Internet Activity Scans
  Looking in places you wouldn't be able to makes the Porn Detection Stick very thorough. Even if images are deleted or Internet history is cleared, you can still recover and scan deleted images and Internet activity making your scans much more effective than manual searches for pornography.

Paraben Device Seizure Field Kit

Part #: P-DSFK

Standard: $3,495.00
Rugged (with Laptop): $6,495.00

The Device Seizure Field Kit Includes:

• One license of Device Seizure to acquire, analyze, and report on over 2,200 different devices
• Cables, chargers, & other hardware for extracting data from handheld devices - View List of Hardware
• A 1.6 GHz Laptop with 1 GB RAM and a 120 GB hard drive used to perform acquisitions and analysis
• One iRecovery Stick to recover deleted data from iPhones.
• One Porn Detection Stick for fast, portable searches of illicit images on any drive.
• One Chat Stick for fast, portable searches and analysis of chat logs on any drive.
• One license of Forensic Replicator to acquire data from different media you may encounter in the field
• One license of P2 eXplorer to mount images as a virtual drive
• Various media card readers
• Rugged carrying case
• One year software and new cable subscriptions

Other Features:

• Expandable kit allows you to:
• Install other forensic software so you're entire toolbox can go with you anywhere
• Perform comprehensive analysis of acquired data
• Bookmarking
• Data Carving of Multi-Media Files
• Deleted Data Recovery
• Read Backup Files from a PC
• File Sorting
• Windows CE Registry Viewer
• Built in File Viewers
• Built in Hex Viewer
• Over 250 Other File Viewers
• Examine various types of media such as USB drives and SD Cards
• Add more cables and components to your kit
• Recover deleted data with physical acquisitions
• Search for illicit images and chat logs on computers
• Created by a trusted forensic company
• Less expensive than other portable solutions that aren't expandable
• Easily update your existing Device Seizure and Toolbox with the Field Kit Conversion Kit

Rugged Device Seizure Field Kit Option

If you need everything to be rugged in your field deployable cell phone forensic solutions, you can opt for the rugged laptop. The Ruggedized Tablet PC to perform acquisitions and analysis has the following specs:

• Intel Core Duo ULV U2500 - 1.2GHz, 533MHz FSB, 2MB L2 cache
• 8.4" SVGA Color TFT LCD (800 x 600), Digitizer and Passive Touch Screen Standard
• 2GB DDR2 RAM
• 80GB 2.5 Shock Mounted Hard Drive
• Windows XP Tablet PC Edition
• Meets or exceeds MIL-STD 810F, 506.5 IV: 26 Drop/Shock Standards
• Integrated RJ-11 Fax/Modem, RJ-45 Ethernet
• Two Built-in Stereo Speakers
• 2 - USB 2.0 Ports / 1 Mini-USB Port
• PC Card Slot Type 2, Compact Flash Type 2, PCI Exp
• High-Capacity Li-ION Battery Pack (6600 mAh)
• 4.60 lbs. 2.08 kg (With High Capacity Battery)

5 Star Review in SC Magazine
- Device Seizure has once again been awarded a 5 star review in SC Magazine.

Paraben Stonghold Box

Part #: P-SB

$1,595.00

"The StrongHold Box is constructed of .090 Aluminum, utilizing precision machined tolerances throughout to maintain an RF-Tight environment. The special "double lip" technology gives you an RF isolation greater than 90dB down at 1GHz. The heavy duty RF sealed cover hinges open and close with a precision air piston. Once closed, a large RF tight viewing window overlooks the entire working area within the enclosure. Hands-on, complete access to the contents of the box is accomplished by using specially designed, silver impregnated, ultra fine mesh gloves that offer excellent manual dexterity. The entire interior is lined with RF absorbent foam that provides 24dB attenuation. The work area has built-in lighting via low voltage incandescent lamps powered by the RF Filtered AC Supply. The Stronghold Box includes a Filtered RS-232 interface, Filtered USB data port and 6 outlet power strip (US Outlets) for supplying power to the phones."

Paraben Project-a-Phone

Part #: P-PAP

P-PAP-ICD-1300: $295.00
P-PAP-ICD-5200: $495.00

"Even with advanced forensic tools like Device Seizure, you never know when you'll run into a device that has no way of electronically processing the data. Sometimes, you just have to process a phone or PDA "old school" by scrolling through the screens and taking pictures. Project-a-Phone securely clamps your handheld device in place and delivers a clear video image of the screen to your computer, so you can show it on your monitor, display it through your projector, or share it on the Web. It provides easy access to the controls, while stabilizing your device, so you can run live demonstrations"

Project-a-Phone ICD-1300

• Fits most major mobile phones and handheld devices
• Delivers live video or still images
• Lets you record audio and video and take screen captures
• Lightweight and compact for excellent portability
• Includes durable, custom carrying case
• Can be set up in minutes
• Extremely affordable
• Software can simultaneously display multiple screens

Product Specifications

• Holds devices up to 12.7cm wide and 14.8cm tall
• Handles screens up to 12cm wide and 8cm high
• Displays up to 800x600 screen resolution
• Delivers 30 frames per second at VGA
• Packs into a sturdy 10" x 9" x 2" case
• Weighs just 1.2 pounds in its case
• Focuses from 3cm to infinity

Project-a-Phone ICD-5200

The ICD-5200 version now includes Case Reporting software. This software lets you combine your pictures and video clips with information about your case and phone and automatically generate a case report in pdf, rtf or html format. The report includes your comments about the evidence and is organized by evidence type (e.g. phone book, call log, etc.).

• Fits virtually any mobile phones and handheld devices
• Delivers live video or still images
• Lets you record audio and video and take screen captures
• Lightweight and compact for excellent portability
• Includes durable, custom carrying case
• Can be set in about a minutes
• Extremely affordable
• Software can simultaneously display multiple screens

Product Specifications

• Accommodates screens up to 12.0cm/4.75" wide and 8cm/3.5" tall.
• Takes screen shots of up to 5.2 megapixels
• Delivers 40 frames per second at SVGA
• Packs into a sturdy 10" x 9" x 2" case