SubRosaSoft has released MacForensicsLab 1.6, a new version of its suite of forensics and analysis tools for Mac OS X 10.3 or later.
MacForensicsLab is the first all-in-one, easy-to-use forensics software suite for Mac OS X.
This version - a Universal upgrade for both Intel and PowerPC Macs - offers improved performance, a much-requested user audit feature, and a dual-bootable CD (intel, PowerPC) that supports the latest machines.
IMacForensicsLab 1.6 also brings the investigator a new tool for auditing user-specific information. The 'Audit' feature allows the investigator to gather information regarding user preferences, internet browsing habits, and most of the user-inputted information such as addresses, caches and various log information that may be of use to an investigation.
Existing features include: auto report generation, detailed logs, device imaging, powerful cataloguing and a browser that lets all files in a directory be previewed at once.
File salvaging and extraction tools will recover as many files as possible from the suspect's drive, media, folders, or files, while user-specific information auditing allows investigator to gather user preferences, internet browsing habits, caches, address book, cookies, and network access.
The software is available as a free upgrade for registered users, but otherwise costs $995.