Virtually Mount Hard Drive Images for Analysis

Paraben's P2 eXplorer allows you to mount your forensic image (or almost any drive image for that matter) and explore it as though it were a drive on your machine while preserving the forensic nature of your evidence.


This means that an image is mounted as the actual bitstream image, preserving unallocated, slack, and deleted data. P2X is easy to use and most importantly, it's free to registered users of any P2 Forensic Collection program.

Here are some key features of "P2 eXplorer":

· Mounts Paraben's Forensic Replicator images (PFR)
· Mounts compressed & encrypted PFR images
· Mounts EnCase images
· Mounts SafeBack 1 & 2 images
· Mounts WinImage non-compressed images
· Mounts RAW images from Linux DD & other tools
· Supports Dynamic drive images
· Auto-detects image format
· Supports both logical and physical images types
· MD5 hash verification
· Shell support for easy mounting/unmounting
· Write-protection for preserving evidence
· MD5 checksum verification
· Supports mounting over a network
· Mount several images at a time
· Includes a free 60 day subscription with purchase