MD5’s proprietary forensic software tool, Virtual Forensic Computing (VFC®) is an essential tool in an investigator’s tool box. VFC saves time and energy by helping the examiner to quickly and effortlessly recreate the digital crime-scene, allowing the investigator to hunt around and interact with the suspect’s desktop environment.
The resulting VFC virtual machine can be used in many ways, including to:
• Demonstrate accessibility of evidence
• Interact with software on the guest system to access:
o proprietary databases
o files with proprietary file extensions in their native environment
• Easily disprove and/or prove claims of interaction with software or the system itself.
Screen shots and screen capture video of the suspect’s system – or even live use the software – can provide invaluable evidence in a court of law and have helped many prosecutors to explain what may otherwise have been highly technical evidence to non-technical audiences.
For more information