Digital Forensics Tools by Digital Forensics Experts
Making maximum exploitation of electronic evidence more accessible Buy Now
Arsenal Image Mounter
Arsenal Image Mounter mounts the contents of disk images as complete disks in Windows®. As far as Windows is concerned, the contents of disk images mounted by Arsenal Image Mounter are real SCSI disks, allowing users to benefit from disk-specific features like integration with Disk Manager, launching virtual machines (and then bypassing Windows authentication), managing BitLocker-protected volumes, mounting Volume Shadow Copies, and more.
Hibernation Recon
Hibernation Recon supports active memory reconstruction from Windows XP, Vista, 7, 8/8.1, and 10 hibernation files and also extracts massive volumes of information from the multiple types (and levels) of slack space that often exist within them. Additional features of Hibernation Recon include the automatic recovery of valuable NTFS metadata and parallel processing of multiple hibernation files.
Registry Recon
Registry Recon is not just another Registry parser. We developed powerful new methods to parse Registry data so that Registries which have existed on a Windows system over time can be rebuilt, providing unique insight into how Registry data has changed over time. Registry Recon provides access to an enormous volume of Registry data which has been effectively deleted, whether that deletion occurred due to benign system activity, malfeasance by a user, or even re-imaging by IT personnel.
Arsenal Image Mounter
Complete Mounting
Mount contents of raw, forensic, and virtual machine disk images as complete or “real” disks on Windows
Forensic Features
Temporary write support, “fake” disk signatures, CLI versions, virtual machine launching, Windows authentication bypass, BitLocker management, and more
Volume Shadow Copies
Quickly mount all Volume Shadow Copies (VSCs) within a disk image
Hibernation Recon
Active Memory
Reconstruction of active memory from Windows XP, Vista, 7, 8/8.1, and 10 hibernation files
Hibernation Slack
The only tool that properly supports the extraction of multiple types and levels of hibernation slack
NTFS Metadata
Automatic recovery of valuable NTFS metadata
Registry Recon
One-Click Harvesting
Efficient collection of active, backed-up, and even deleted Windows Registry hives from forensic images
Registry Reconstruction
Recon View
Harness the power of huge volumes of Registry information to see how Registries changed over time
What People Are Saying
After many unsuccessful attempts to launch forensic images into virtual machines with a popular digital forensics tool, I decided to give Arsenal Image Mounter a try. I’m very glad I did, because I was able to virtualize forensic images from multiple suspects. AIM also bypassed Microsoft cloud account passwords within the virtual machines, so I was able to take valuable screenshots for the US Attorney. In addition, I have found AIM’s multiple methods of Volume Shadow Copy exporting to be useful.
Hibernation Recon has become DoD’s must-have tool for extracting digital artifacts from Windows hibernation files. Not only does Hibernation Recon properly reconstruct active memory for all versions of Windows when other tools fail,
I am thoroughly impressed with Registry Recon’s capabilities. Working in law enforcement, I can see how valuable it is to know how a suspect’s computer interacted with particular networks, documents, and storage devices over time.
Pricing & Plans
Each of our subscription options includes access to all the Arsenal tools, both those that exist now and those we release while the subscription is active! Pick the subscription that works for you without the hassle of maintenance fees.
1 Month
- Great for applying Arsenal’s tools on an important case, with zero commitment.
- Email Support
- Renew Anytime
- Zero-Commitment
- Locked-in Pricing
1 Year
- Perfect for investigators that need to purchase tools on an annual budget cycle.
- Includes 3% Discount
- Email Support
- Renew Annually
- Locked-in Pricing
3 Years
- Great for investigators who want to lock-in a low price long term.
- Includes 9% Discount
- Email Support
- Renew Every 3 Years
- Locked-in Pricing
5 Years
- Lock-in a low price and get the largest discount.
- Includes 15% Discount
- Email Support
- Renew Every 5 Years
- Locked-in Pricing
You can extend or renew subscriptions here, if you used this website (ultimately, using Avangate/2Checkout) to make your previous purchase. Detailed instructions can be found in our Extending/Renewing Arsenal Recon Subscriptions Guide.
If you did not use this website to make your previous purchase, please contact sales to complete your extension or renewal.
Please note: by selecting a subscription button above (or following the link to extend/renew existing subscriptions) you will leave the ArsenalRecon.com website and be directed to our e-commerce partner 2Checkout.
Looking for additional plans?
Looking for the latest versions of our tools?
Meet Our Team
Our team is led by Mark Spencer, whose philosophy is “Don’t settle for the easy way, strive for the right way.” We are digital forensics experts from Arsenal Consulting and world-class developers who live and breathe operating system internals. We are passionate about digital forensics and dedicated to the preservation and analysis of electronic evidence using the most powerful technologies available. In our quest to dig deeper, we got tired of waiting for solutions to meet our needs – so we began building our own.
Mark Spencer
President
Brian Gerdon
Digital Forensics Examiner
Emina Doherty
Digital Forensics Examiner
Anastasia Shek
Digital Forensics Analyst
Olof Lagerkvist
Software Development
Joakim Schicht
Software Development
Arm Yourself!
Join our mailing list to arm yourself with updates about Arsenal tools, training, and research. Our mailing list is double opt-in so you will need to check your email and confirm your subscription before receiving our mailings.
Chelsea, Massachusetts
sales@ArsenalRecon.com
(617) ARSENAL
or (617) 277-3625
Site Map
Home
Products
Pricing
Training
Testimonials
Insights
Contact
FAQ
Legal
Privacy Policy
Terms & Conditions
Cookie Policy
Follow Us
