Home |  Store  |  Download  |  Pro Modules  |  Screen Shots  |  Videos  |  Forum  |  Support |  About Us  |  Contact Us  



Welcome to : Forensic Data Recovery

Blade® is a Windows-based, advanced professional forensic data recovery solution designed by Digital Detective Group.  It supports professional module plug-ins which give it advanced data recovery and analysis capabilities.


The power and flexibility of the tool can be expanded as new modules become available.  Blade® supports all of the major forensic image formats and is more than just a data recovery tool.  The professional modules have in-built Intelli-Carve® validation and interpretation routines to assist with accurate data recovery.  Some of the standard profiles also have Intelli-Carve® validated routines (such as the JPEG recovery module).


The software has been designed for extremely fast/accurate forensic data recovery.  Not only is it highly effective in the pre-analysis stage of a forensic examination, it can be quickly configured to recover bespoke data formats.  It has specifically been written for the field of Digital Forensics.


Professional Recovery Modules

With the addition of professional modules, Blade® can recover data which is not extracted by other forensic tools or traditional carvers.   


Professional Modules add a powerful capability to this product.  Blade® is also ideal for practitioners (or technicians with limited forensic training) who want to perform quick and easy data recovery without resorting to using scripting programming languages or tying up their main forensic tool.

Read more about Blade® Professional Data Recovery Modules


Professional Modules with Intelli-Carve®

- Outlook Express Recovery

- AOL Personal Filing Cabinet Recovery

- Link File Recovery & Deconstruction

- E01 Image Conversion (Convert to flat file image)

- INFO2 Record Recovery & Deconstruction

- Cryptographic Hashing Module


Key Features

- Regular Expression High Speed Advanced Carving
- Supports Headers, Data Landmarks & Footers
- User Created/Customiseable Data Recovery Profiles
- Pro Modules for Advanced/Specialised Data Recovery
- Variable Input Block Size, Sector Boundary Options
- Multithreaded for fast searching and recovery
- Forensic Audit Logging

- Recovery Profile Version Management System

- JPEG image recovery using Intelli-Carve®



- Single/Segmented Unix/Linux DD/Raw Image Files
- EnCase® (v1-7) Image Files

- Advanced Forensic Format (AFF)
- SMART/Expert Witness Image Files
- AccessData® FTK Image Files
- Physical/Logical disk access

- Virtual Hard Disks (vhd, vmdk)



Hiberfil.sys Conversion

This professional module processes a Windows hibernation (hiberfil.sys) file and converts it into a raw memory dump output file that can then be used for subsequent searching by Blade®. A hibernation file contains blocks of data compressed using the Xpress Compression algorithm as documented on MSDN. The converter module decompresses these xpress blocks and writes out the pages of memory they contain, all assembled back into their correct page slots in the output file. The resulting output file is therefore an ordered dump of the pages of memory that were in use when the source computer entered hibernation.

The module supports hibernation files from Windows XP, Vista and 7, both 32-bit and 64-bit.
Read more about Blade® Professional Data Recovery Modules

Advanced Forensics Format (AFF) Support and AFF Image Converter

The Advanced Forensics Format (AFF) is an extensible open format for the storage of disk images and related forensic metadata. It was developed by Simson Garfinkel and Basis Technology. Blade® (and HstEx®) now support the processing of AFF image files (as well as other forensic formats). The following page lists the supported file formats: Forensic Image Formats Supported by Blade®.

We have added a new Professional Module to allow you to convert AFF images to a single (or multiple) segment binary image. As you can see from the Image Converter properties (accessible by right clicking on the 'AFF Image Converter' and selecting 'Module Properties'), there are options for splitting the image and creating a specific segment length as well as calculating MD5 and SHA1 hashes on the output data.
Read more about Blade® Professional Data Recovery Modules

SQLite Database Recovery

With the addition of the length multiplier option in the recovery profile, we have added a recovery profile which utilises this feature. The main database file consists of one or more pages. The size of a page is a power of two between 512 and 65536 inclusive. All pages within the same database are the same size. The page size for a database file is determined by the 2-byte integer located in the header of the file. Also located in the header is a 4-byte integer recording the size of the database file in pages. The multiplier feature can read this value and work out the correct size of the database.

Read more about Blade Professiona Data Recovery Modules



New Evaluation Version of Blade® Professional

In this release of Blade®, we have added the ability to work in demo or evaluation mode.

For a period of 30 days from installation, Blade® will function with many of the features of the Professional version (with some limitations). During this time, Blade® will be able to process any of the supported data sources, but will only recover the first 10 of any identified file type. For a full list of the limitations, please see: Evaluation Version Limitations.



Video Library: Introduction to Blade® and the Data Recovery Features

To help you understand how Blade® works and to demonstrate the power of the software we have created a number of demonstration videos and presentations.  In the video library,  you will find a number of introductory screen-capture videos demonstrating the powerful capabilities of Blade®.


The videos will show you the user interface and explain some of the main features.  They will show access to the Global and Personal signature database where the forensic examiner can create and tweak data recovery profiles.


There is also an introduction to each Blade® Professional Module with a demonstration of how each one works.  The professional modules are the key to the power of this software.

Read more about Blade Forensic Data Carving and View Introuctory Videos


Blade Introduction to Forensic Carving and Data Recovery



Digital Detective Group Logo Digital Detective Software Secured by Comodo Digital Signature and Fully Tested on Windows 7 Vista


   Privacy Policy | Copyright© 2001-2013 Digital Detective Group Ltd