Belkasoft X Forensic

What Belkasoft X Forensic is

Belkasoft X Forensic is a self-hosted digital forensics product for acquiring, analyzing, and reporting evidence from computers, mobile devices, RAM, cars, drones, and cloud sources. Its product page says it is offered to government customers only, including digital forensic laboratories at federal law-enforcement agencies and state-level police departments. The perpetual license can include optional annual software maintenance and support; pricing is provided by quote.

Acquisition options cover computers and mobile devices, including DD/E01 imaging, iOS checkm8 and agent-based acquisition, and several Android methods. Analysis capabilities include timeline and connection graph analysis, SQLite recovery, hash-set analysis, file carving, and picture and video analysis. The software can examine UFED and GrayKey images, virtual machines, Amazon S3-based images, Berla car exports, and data from services including Google Drive, iCloud, Microsoft 365, WhatsApp, and Telegram. Reports can be generated in formats such as HTML, XML, CSV, PDF, Excel, Word, ProjectVIC JSON, and Relativity Short Message Format. Colleagues can view shared findings through the free Evidence Reader, whether or not X Forensic is installed. A 30-day trial requires internet access and limits report contents and access to several features.

Who it suits

Belkasoft X Forensic suits government digital forensic laboratories that need to acquire and analyze evidence across computer, mobile, vehicle, drone, RAM, and cloud sources. Its product page specifically identifies federal law-enforcement agencies and state-level police departments as intended users.

Limits

The 30-day trial requires internet access, limits reports to 50% of randomly selected artifacts, and excludes several acquisition, decryption, virtual-machine, and command-line automation features. The free Evidence Reader is for viewing shared findings.

Getting started

1. Visit the Belkasoft X Forensic website.
2. Submit a request for pricing.
3. Use the self-hosted deployment option.
4. Request the 30-day trial if you want to evaluate the product; it requires internet access.
5. Use the Evidence Reader to share findings with colleagues.

Verdict

Government forensic laboratories should consider Belkasoft X Forensic for its broad acquisition sources, analysis tools, and reporting options. Buyers outside government should look elsewhere, and prospective customers need to request a quote for pricing.