DFIR Tool Comparison
Details for this comparison chart are compiled from web resources, quotations, etc. Materials are for comparison of features and not for any other purposes. All names are property of their respective companies. If you have an edit please email us at forensics@paraben.com we are happy to make the adjustment.
Digital Forensic Technlogy
Computer – Mobile – Cloud



PRICE $5,995
$1,199/subscription
Subscription First Year Included
Web license Free
Dongle Fee $89.00 + Shipping
PRICE $15,502
Unknown Subscription Fee
Unknown if Subscription First Year is Included
Dongle Fee $4,000.00 + Shipping
PRICE $20,465
Unknown Subscription Fee
First Year Subscription NOT included
Dongle Fee Unknown
IMAGING
Bootable Imaging (Computer)
Remote Imaging (Computers)
Remote Cloud Collection
Live Cloud Collection
IMAGING
Remote Imaging (Additional Fees)
Remote Cloud Capture (Additional Fees)
IMAGING
Bootable Imaging (Computer)
Remote Imaging (Computers)
Remote Cloud Collection
FILE SYSTEMS
CD/DVD
exFAT
EXT 2 & 3
EXT 4
FAT 12/16/32
HFS+, HFSX
NTFS
XBOX (FATX, STFS, XDBF)
FILE SYSTEMS
APFS
CD/DVD
exFAT
EXT 2 & 3
EXT 4
FAT 12/16/32
HFS+, HFSX
NTFS
ReFS
FILE SYSTEMS
APFS
exFAT
EXT 2 & 3
EXT 4
FAT 12/16/32
HFS+, HFSX
HFSJ
NTFS
UFS
OTHER FILES SUPPORTED
EVT/EVTX (Export to External)
EXE/DLL
LNK Files
Import of Log Files
AccessData FTK (Mobile)
Cellebrite .UFD (Mobile)
Graykey (Android & iOS)
XBOX (FATX, STFS, XDBF)
OTHER FILES SUPPORTED
EXE/DLL
LNK Files
AccessData FTK (Mobile)
Cellebrite .UFD
Graykey (Android & iOS)
.DAR Files
OTHER FILES SUPPORTED
EVT/EVTX
EXE/DLL
LNK Files
Import Log Files
AccessData FTK (Mobile)
Cellebrite .UFD
Micro Systemation XRY
X-Ways
.DAR
FILE ANALYSIS
Archive Files
Microsoft Office Files
EXIF Data
GeoJSON
Google Takeout
JTAG Memory Dumps
Multimedia Files
OLE Storage
SQLite Databases
Text Files in Various Codepages
Windows Registry Hive Files
Windows TimeLine Events
Basilisk Browser History
Brave Browser
Chrome Browser
Edge Browser (Both versions)
Firefox Browser
Iceweasel Browser
K-Meleon Browser
LibreWolf Browser
Opera Browser
Pale Moon Browser
Safari Browser
Seamonkey Browser
Tor Browser (If saved)
Waterfox Browser
Internet Explorer Browser
Miranda Chat History
MSN Chat History
Hello Chat History
ICQ Chat History
Skype Chat History
Trillian Chat History
Viber Chat History
Yahoo! Chat History
Advanced Data Recovery Eudora
Advanced Data Recovery Groupwise
Advanced Data Recovery NSF
Advanced Data Recovery OST
Advanced Data Recovery PST
Advanced Data Recovery The Bat!
Advanced Data Recovery Thunderbird
Advanced Data Recovery EDB
AOL Database
Corrupt Data Recovery NSF
Corrupt Data Recovery EDB
EML Files
Lotus Notes
Exchange STM
Zimbra Archives
Google Mail
Maildir Database
MBOX
Microsoft Exchange Tracking Logs
Microsoft Exchange EDB
Microsoft Outlook PST
Microsoft Outlook Express DBX
Microsoft Outlook Express MBX
Microsoft Outlook OST
Novelle Groupwise
TheBat! Email
Thunderbird Email
Windows 10 Native Email Client
Windows 11 Native Email Client
Office 365 Backstage Artifacts
Office 365 MRU
FILE ANALYSIS
Archive Files
Microsoft Office Files
EXIF Data
Google Takeout
Multimedia Files
SQLite Databases
Windows Registry Hive Files
Windows TimeLine Events
Brave Browser
Chrome Browser
Edge Browser (Both versions)
Firefox Browser
Iceweasel Browser
Opera Browser
Safari Browser
Seamonkey Browser
Internet Explorer Browser
MSN Chat History
Skype Chat History
Microsoft Teams
Yahoo! Chat History
Advanced Data Recovery PST
Advanced Data Recovery Thunderbird
AOL Database
Apple Mail EMLX
EML Files
Google Mail
MBOX
Microsoft Exchange EDB
Microsoft Outlook PST
Microsoft Outlook Express DBX
Microsoft Outlook Express MBX
Microsoft Outlook OST
Outlook Mail Message MSG
Thunderbird Email
Windows 10 Native Email Client
Windows 11 Native Email Client
FILE ANALYSIS
Archive Files
Microsoft Office Files
EXIF Data
Multimedia Files
OLE Storage
SQLite Databases
Text Files in Various Codepages
Unix Files
Windows Registry Hive
Windows Timeline Events
Brave Browser
Chrome Browser
Edge Browser
Firefox Browser
Iceweasel Browser
Opera Browser
Safari Browser
Seamonkey Browser
Internet Explorer Browser
Miranda Chat History
MSN Chat History
Hello Chat History
ICQ Chat History
Skype Chat History
Apple Mail
EML Files
Microsoft PST
Microsoft OST
MSG Files
ANALYSIS FUNCTIONS
Boolean Searching
Hex Searching
Regular Expression Searches
Index Searching
Search by Emoji & Emoticon
Custom Email Searching
Custom Chat Searching
Custom Search Term List
OCR Searching
Malware Detection
Data Triage
Python Scripting
Ability to open files in external viewers
Alternate Data Stream Browsing
Custom Hash Database
Cloud Authentication Collection
Deleted File Recovery
Deleted File Indexing
Encrypted File Detection
File Signature Mismatch
File Attributes Browsing
Hash Code Calculation
File Slack Browsing
Incident Response Triage
Memory Dump Analysis
Mobile Device Backup Parsing
Multi-threading
NIST Hash Database Support
Physical Disk Mounting
RAM Analysis
Unallocated Space Browsing
Unpartitioned Space Browsing
ANALYSIS FUNCTIONS
Boolean Searching
Hex Searching
Regular Expression Searches
Index Searching
Custom Email Searching
Custom Chat Searching
Custom Search Term List
OCR Searching
Data Triage
Indexed File Quick Searches
Python Scripting
Ability to open files in external viewers
Alternate Data Stream Browsing
Custom Hash Database
Cloud Authentication Collection
Deleted File Recovery
Encrypted File Detection
File Attributes Browsing
Hash Code Calculation
File Slack Browsing
McAfee Drive Encryption
Mobile Device Backup Parsing
NIST Hash Database Support
Physical Disk Mounting
RAM Analysis
Unallocated Space Browsing
Unpartitioned Space Browsing
Volume Shadow Copy Analysis
Windows 10 Bitlocker
ANALYSIS FUNCTIONS
Boolean Searching
Hex Searching
Regular Expression Searches
Search by Emoji & Emoticon
Custom Email Searching
Custom Chat Searching
Index Searching
OCR Searching
Custom Search Term List
Malware Detection
Python Scripting
External Viewer Compatibility
Alternate Data Stream Browsing
Cloud Authentication Collection
Custom Hash Databases
Deleted File Recovery
Deleted File Indexing
File Signature Mismatch
Encrypted File Detection
File Attributes Browsing
Hash Code Calculation
File Slack Browsing
Memory Dump Analysis
Mobile Device Backup Parsing
Multi-threading
NIST Hash Database Support
Physical Disk Mounting
Unallocated Space Browsing
Unpartitioned Space Browsing
Volume Shadow Copy Analysis
Windows 10 Bitlocker
REPORTING & EXPORTING
Batch Export & Searches
Built-in Summaries/Conclusion Edits
CSV Report
Export in Native Format
HTML Report
PDF Report
Report to CD or DVD
Report Customization
RTF Report
Specialized Email Reporting
Text Report
XML Report
Email Attachments Export
Email Export to EML
Email Export to MSG
Email Export to PST
File & Folder Export
Data Export to Native
REPORTING & EXPORTING
Batch Export & Searches
CSV Report
Export in Native Format
HTML Report
PDF Report
DOCX Report
Report Customization
Text Report
XML Report
Email Attachments Export
Email Export to EML
Email Export to MSG
Email Export to PST
File & Folder Export
REPORTING & EXPORTING
Built-in Summaries/Conclusion Edits
HTML Report
PDF Report
RTF Report
Text Report
XML Report
Specialized Email Reporting
Report Customization
Mobile Device Support



LICENSE STRUCTURE
Included with the above named product.
LICENSE STRUCTURE
Included with the above named product.
LICENSE STRUCTURE
NOT Included with the above named product. Mobile is sold seperately.
DEVICE TYPES SUPPORTED
Android (All versions)
ADB Backup
Root Imaging Android
3rd Party Rooting Android
Apple iOS (All versions)
Apple iPad OS (All versions)
Jailbroken iOS (All versions)
BlackBerry
Windows Phone
Tizen OS
MediaTek Chips
Spreadtrum Chips
Qualcomm Chips
Alcatel Feature Phone
Kyocera Feature Phone
LG Feature Phone
Motorola Feature Phone
Nokia Feature Phone
Siemens Feature Phone
Samsung Feature Phone
Sony-Ericsson Feature Phone
Sanyo Feature Phone
ZTE Feature Phone
All types of CDMA (BREW)
Garmin GPS
TomTom GPS
DEVICE TYPES SUPPORTED
Android
Apple iOS (All versions)
Windows Phone
MTK Chips
Qualcomm Chips
DEVICE TYPES SUPPORTED
Android (All versions)
ADB Backup
Root Imaging Android
3rd Party Rooting Android
Apple iOS (All versions)
Apple iPad OS (All versions)
Jailbroken iOS (All versions)
BlackBerry
Windows Phone
Tizen OS
MediaTek Chips
Spreadtrum Chips
Qualcomm Chips
Alcatel Feature Phone
Kyocera Feature Phone
LG Feature Phone
Motorola Feature Phone
Nokia Feature Phone
Siemens Feature Phone
Samsung Feature Phone
Sony-Ericsson Feature Phone
Sanyo Feature Phone
ZTE Feature Phone
All types of CDMA (BREW)
Garmin GPS
TomTom GPS
MOBILE SPECIFIC FEATURES
Mobile Data Triage
Device Logical Imaging
Device Physical Imaging (Device Dependent)
Android Rooting Utilities
Multiple Device Simultaneous Acquisition
Android ADB Import
iOS Backup Import
iOS Backup Auto-Encrypt
iOS Backup Encrypted Import
BlackBerry Backup IMport
JTAG & Chip Off Analysis
Android Activity Timeline Capture
GrayKey Data Parsing (Android & iOS)
UFED Case Parsing
Lock Bypass (Varies by tool)
Android App Downgrade (Through Version 13)
MOBILE SPECIFIC FEATURES
Device Logical Imaging
Device Physical Imaging (Device Dependent)
iOS Backup Import
iOS Backup Encrypted Import
GrayKey Data Parsing (Android & iOS)
UFED Case Parsing
Lock Bypass (Varies by tool)
MOBILE SPECIFIC FEATURES
Mobile Data Triage
Device Logical Imaging
Device Physical Imaging (Device Dependent)
Android Rooting Utilities
Multiple Device Simultaneous Acquisition
Android ADB Import
iOS Backup Import
iOS Backup Auto-Encrypt
iOS Backup Encrypted Import
BlackBerry Backup Import
JTAG & Chip Off Analysis
GrayKey Data Parsing (Android & iOS)
UFED Case Parsing
XRY Case Parsing
Facial Recognition
Lock Bypass (Varies by tool)
Android App Downgrade (Through Version 11
IOT SUPPORT
Amazon Echo
Apple Watch (App Parsing)
DJI Go (Drone)
Fitbit
Smartwatches (Android & Tizen)
IOT SUPPORT
Data Unavailable
IOT SUPPORT
Amazon Echo
Apple Watch (App Parsing)
DJI Go (Drone)
Fitbit
SOCIAL MEDIA SPECIFIC
Social Media Archive Parsing
SOCIAL MEDIA SPECIFIC
Data Unavailable
SOCIAL MEDIA SPECIFIC
Data Unavailable
Cloud Support
CLOUD DATA
Included in License Price
Amazon Alexa
Discord
Dropbox
Facebook Messenger
Gmail
Google Drive
Google Locations
iCloud Apple (Limited)
Office 365 Import
Slack Channels
OneDrive
Skype
Twitch
CLOUD DATA
NOT Included in License Price
Box
Discord
Dropbox
Gmail
Google Drive
Google Locations
Hotmail
iCloud Apple (Limited)
Office 365 Import
Slack Channels
OneDrive
Skype
Twitch
Yahoo
CLOUD DATA
NOT Included in License Price
Amazon Alexa
Amazon Shopping
Booking
Box
Coinbase
Dropbox
Gmail
Google Drive
Google Locations
Hotmail
iCloud Apple (Limited)
Viber
Yahoo