DFIR Tool Comparison

Details for this comparison chart are compiled from web resources, quotations, etc. Materials are for comparison of features and not for any other purposes. All names are property of their respective companies. If you have an edit please email us at forensics@paraben.com we are happy to make the adjustment.

Digital Forensic Technlogy

Computer – Mobile – Cloud

PRICE $6,295

$1,199/subscription

Subscription First Year Included

Web license Free

Dongle Fee $110.00 + Shipping

PRICE $15,502

Unknown Subscription Fee

Unknown if Subscription First Year is Included

Dongle Fee $4,000.00 + Shipping

 

PRICE $20,465

Unknown Subscription Fee

First Year Subscription NOT included

Dongle Fee Unknown 

 

IMAGING

Bootable Imaging (Computer)

Remote Imaging (Computers)

Remote Cloud Collection

Live Cloud Collection

IMAGING

Remote Imaging (Additional Fees)

Remote Cloud Capture (Additional Fees)

IMAGING

Bootable Imaging (Computer)

Remote Imaging (Computers)

Remote Cloud Collection 

FILE SYSTEMS

CD/DVD

exFAT

EXT 2 & 3

EXT 4

FAT 12/16/32

HFS+, HFSX

NTFS

XBOX (FATX, STFS, XDBF)

FILE SYSTEMS

APFS

CD/DVD

exFAT

EXT 2 & 3

EXT 4

FAT 12/16/32

HFS+, HFSX

NTFS

ReFS

FILE SYSTEMS

APFS

exFAT

EXT 2 & 3

EXT 4

FAT 12/16/32

HFS+, HFSX

HFSJ

NTFS

UFS

OTHER FILES SUPPORTED

EVT/EVTX (Export to External)

EXE/DLL

LNK Files

Import of Log Files

AccessData FTK (Mobile)

Cellebrite .UFD  (Mobile)

Graykey (Android & iOS)

XBOX (FATX, STFS, XDBF)

OTHER FILES SUPPORTED

EXE/DLL

LNK Files

AccessData FTK (Mobile)

Cellebrite .UFD

Graykey (Android & iOS)

.DAR Files

OTHER FILES SUPPORTED

EVT/EVTX

EXE/DLL

LNK Files

Import Log Files

AccessData FTK (Mobile)

Cellebrite .UFD

Micro Systemation XRY

X-Ways

.DAR

FILE ANALYSIS

Archive Files

Microsoft Office Files

EXIF Data

GeoJSON

Google Takeout

JTAG Memory Dumps

Multimedia Files

OLE Storage

SQLite Databases

Text Files in Various Codepages

Windows Registry Hive Files

Windows TimeLine Events

Basilisk Browser History

Brave Browser

Chrome Browser

Edge Browser (Both versions)

Firefox Browser

Iceweasel Browser

K-Meleon Browser

LibreWolf Browser

Opera Browser

Pale Moon Browser

Safari Browser

Seamonkey Browser

Tor Browser (If saved)

Waterfox Browser

Internet Explorer Browser

Miranda Chat History

MSN Chat History

Hello Chat History

ICQ Chat History

Skype Chat History

Trillian Chat History

Viber Chat History

Yahoo! Chat History

Advanced Data Recovery Eudora

Advanced Data Recovery Groupwise

Advanced Data Recovery NSF

Advanced Data Recovery OST

Advanced Data Recovery PST

Advanced Data Recovery The Bat!

Advanced Data Recovery Thunderbird

Advanced Data Recovery EDB

AOL Database

Corrupt Data Recovery NSF

Corrupt Data Recovery EDB

EML Files

Lotus Notes

Exchange STM

Zimbra Archives

Google Mail

Maildir Database

MBOX

Microsoft Exchange Tracking Logs

Microsoft Exchange EDB

Microsoft Outlook PST

Microsoft Outlook Express DBX

Microsoft Outlook Express MBX

Microsoft Outlook OST

Novelle Groupwise

TheBat! Email

Thunderbird Email

Windows 10 Native Email Client

Windows 11 Native Email Client

Office 365 Backstage Artifacts

Office 365 MRU

FILE ANALYSIS

Archive Files

Microsoft Office Files

EXIF Data

Google Takeout

Multimedia Files

SQLite Databases

Windows Registry Hive Files

Windows TimeLine Events

Brave Browser

Chrome Browser

Edge Browser (Both versions)

Firefox Browser

Iceweasel Browser

Opera Browser

Safari Browser

Seamonkey Browser

Internet Explorer Browser

MSN Chat History

Skype Chat History

Microsoft Teams

Yahoo! Chat History

Advanced Data Recovery PST

Advanced Data Recovery Thunderbird

AOL Database

Apple Mail EMLX

EML Files

Google Mail

MBOX

Microsoft Exchange EDB

Microsoft Outlook PST

Microsoft Outlook Express DBX

Microsoft Outlook Express MBX

Microsoft Outlook OST

Outlook Mail Message MSG

Thunderbird Email

Windows 10 Native Email Client

Windows 11 Native Email Client

FILE ANALYSIS

Archive Files

Microsoft Office Files

EXIF Data

Multimedia Files

OLE Storage

SQLite Databases

Text Files in Various Codepages

Unix Files

Windows Registry Hive

Windows Timeline Events

Brave Browser

Chrome Browser

Edge Browser

Firefox Browser

Iceweasel Browser

Opera Browser

Safari Browser

Seamonkey Browser

Internet Explorer Browser

Miranda Chat History

MSN Chat History

Hello Chat History

ICQ Chat History

Skype Chat History

Apple Mail

EML Files

Microsoft PST

Microsoft OST

MSG Files

ANALYSIS FUNCTIONS

Boolean Searching

Hex Searching

Regular Expression Searches

Index Searching

Search by Emoji & Emoticon

Custom Email Searching

Custom Chat Searching

Custom Search Term List

OCR Searching

Malware Detection

Data Triage

Python Scripting

Ability to open files in external viewers

Alternate Data Stream Browsing

Custom Hash Database

Cloud Authentication Collection

Deleted File Recovery

Deleted File Indexing

Encrypted File Detection

File Signature Mismatch

File Attributes Browsing

Hash Code Calculation

File Slack Browsing

Incident Response Triage

Memory Dump Analysis

Mobile Device Backup Parsing

Multi-threading

NIST Hash Database Support

Physical Disk Mounting

RAM Analysis

Unallocated Space Browsing

Unpartitioned Space Browsing

ANALYSIS FUNCTIONS

Boolean Searching

Hex Searching

Regular Expression Searches

Index Searching

Custom Email Searching

Custom Chat Searching

Custom Search Term List

OCR Searching

Data Triage

Indexed File Quick Searches

Python Scripting

Ability to open files in external viewers

Alternate Data Stream Browsing

Custom Hash Database

Cloud Authentication Collection

Deleted File Recovery

Encrypted File Detection

File Attributes Browsing

Hash Code Calculation

File Slack Browsing

McAfee Drive Encryption

Mobile Device Backup Parsing

NIST Hash Database Support

Physical Disk Mounting

RAM Analysis

Unallocated Space Browsing

Unpartitioned Space Browsing

Volume Shadow Copy Analysis

Windows 10 Bitlocker

ANALYSIS FUNCTIONS

Boolean Searching

Hex Searching

Regular Expression Searches

Search by Emoji & Emoticon

Custom Email Searching

Custom Chat Searching

Index Searching

OCR Searching

Custom Search Term List

Malware Detection

Python Scripting

External Viewer Compatibility

Alternate Data Stream Browsing

Cloud Authentication Collection

Custom Hash Databases

Deleted File Recovery

Deleted File Indexing

File Signature Mismatch

Encrypted File Detection

File Attributes Browsing

Hash Code Calculation

File Slack Browsing

Memory Dump Analysis

Mobile Device Backup Parsing

Multi-threading

NIST Hash Database Support

Physical Disk Mounting

Unallocated Space Browsing

Unpartitioned Space Browsing

Volume Shadow Copy Analysis

Windows 10 Bitlocker 

REPORTING & EXPORTING

Batch Export & Searches

Built-in Summaries/Conclusion Edits

CSV Report

Export in Native Format

HTML Report

PDF Report

Report to CD or DVD

Report Customization

RTF Report

Specialized Email Reporting

Text Report

XML Report

Email Attachments Export

Email Export to EML

Email Export to MSG

Email Export to PST

File & Folder Export

Data Export to Native

REPORTING & EXPORTING

Batch Export & Searches

CSV Report

Export in Native Format

HTML Report

PDF Report

DOCX Report

Report Customization

Text Report

XML Report

Email Attachments Export

Email Export to EML

Email Export to MSG

Email Export to PST

File & Folder Export

REPORTING & EXPORTING

Built-in Summaries/Conclusion Edits

HTML Report

PDF Report

RTF Report

Text Report

XML Report

Specialized Email Reporting 

Report Customization

Mobile Device Support

LICENSE STRUCTURE

Included with the above named product.

LICENSE STRUCTURE

Included with the above named product.

LICENSE STRUCTURE

NOT Included with the above named product. Mobile is sold seperately.

DEVICE TYPES SUPPORTED

Android (All versions)

ADB Backup

Root Imaging Android

3rd Party Rooting Android

Apple iOS (All versions)

Apple iPad OS (All versions)

Jailbroken iOS (All versions)

BlackBerry

Windows Phone

Tizen OS

MediaTek Chips

Spreadtrum Chips

Qualcomm Chips

Alcatel Feature Phone

Kyocera Feature Phone

LG Feature Phone

Motorola Feature Phone

Nokia Feature Phone

Siemens Feature Phone

Samsung Feature Phone

Sony-Ericsson Feature Phone

Sanyo Feature Phone

ZTE Feature Phone

All types of CDMA (BREW)

Garmin GPS

TomTom GPS

DEVICE TYPES SUPPORTED

Android

Apple iOS (All versions)

Windows Phone

MTK Chips

Qualcomm Chips

DEVICE TYPES SUPPORTED

Android (All versions)

ADB Backup

Root Imaging Android

3rd Party Rooting Android

Apple iOS (All versions)

Apple iPad OS (All versions)

Jailbroken iOS (All versions)

BlackBerry

Windows Phone

Tizen OS

MediaTek Chips

Spreadtrum Chips

Qualcomm Chips

Alcatel Feature Phone

Kyocera Feature Phone

LG Feature Phone

Motorola Feature Phone

Nokia Feature Phone

Siemens Feature Phone

Samsung Feature Phone

Sony-Ericsson Feature Phone

Sanyo Feature Phone

ZTE Feature Phone

All types of CDMA (BREW)

Garmin GPS

TomTom GPS

MOBILE SPECIFIC FEATURES

Mobile Data Triage

Device Logical Imaging

Device Physical Imaging (Device Dependent)

Android Rooting Utilities

Multiple Device Simultaneous Acquisition

Android ADB Import

iOS Backup Import

iOS Backup Auto-Encrypt

iOS Backup Encrypted Import

BlackBerry Backup IMport

JTAG & Chip Off Analysis

Android Activity Timeline Capture

GrayKey Data Parsing (Android & iOS)

UFED Case Parsing

Lock Bypass (Varies by tool)

Android App Downgrade (Through Version 13)

MOBILE SPECIFIC FEATURES

Device Logical Imaging

Device Physical Imaging (Device Dependent)

iOS Backup Import

iOS Backup Encrypted Import

GrayKey Data Parsing (Android & iOS)

UFED Case Parsing

Lock Bypass (Varies by tool)

MOBILE SPECIFIC FEATURES

Mobile Data Triage

Device Logical Imaging

Device Physical Imaging (Device Dependent)

Android Rooting Utilities

Multiple Device Simultaneous Acquisition

Android ADB Import

iOS Backup Import

iOS Backup Auto-Encrypt

iOS Backup Encrypted Import

BlackBerry Backup Import

JTAG & Chip Off Analysis

GrayKey Data Parsing (Android & iOS)

UFED Case Parsing

XRY Case Parsing

Facial Recognition

Lock Bypass (Varies by tool)

Android App Downgrade (Through Version 11

IOT SUPPORT

Amazon Echo

Apple Watch (App Parsing)

DJI Go (Drone)

Fitbit

Smartwatches (Android & Tizen)

IOT SUPPORT

Data Unavailable

IOT SUPPORT

Amazon Echo

Apple Watch (App Parsing)

DJI Go (Drone)

Fitbit

SOCIAL MEDIA SPECIFIC

Social Media Archive Parsing

SOCIAL MEDIA SPECIFIC

Data Unavailable

SOCIAL MEDIA SPECIFIC

Data Unavailable

Cloud Support

CLOUD DATA

Included in License Price

Amazon Alexa

Discord

Dropbox

Facebook

Facebook Messenger

Gmail

Google Drive

Google Locations

iCloud Apple (Limited)

Office 365 Import

Instagram

Slack Channels

OneDrive

Skype

Twitch

Twitter 

CLOUD DATA

NOT Included in License Price

Box

Discord

Dropbox

Facebook

Gmail

Google Drive

Google Locations

Hotmail

iCloud Apple (Limited)

Office 365 Import

Instagram

Slack Channels

OneDrive

Skype

Twitch

Twitter

Yahoo

CLOUD DATA

NOT Included in License Price

Amazon Alexa

Amazon Shopping

Booking

Box

Coinbase

Dropbox

Facebook

Gmail

Google Drive

Google Locations

Hotmail

iCloud Apple (Limited)

Instagram

QQ

Twitter

Viber

WhatsApp

Yahoo