​

Introduction

 KeySpace is supporting functions to automatically analyze with easy and useful about Cyber crime scene, Incident Response, Data leakage and internal audit, that using forensic technique. 

​

Ability - functions

• Variety filesystem (NTFS, FAT16/32, exFAT, EXT3, EXT4)​​

• MBR, GPT partition 

• Support Evidence file (E01, Ex01) & VMware image file(VMDK)

• Find something by condition and filter each file type

• Searching keyword in body of documents

• Searching keyword from whole disk

• File structure viewer on registry hive file

• File structure viewer on compound file (OLE, OOXML, ZIP)

• Preview document 

• Dash board (summary results of category)

• Automatic analysis

  • Windows Artifacts

  • Linux/Unix Artifacts (Not now, only filesystem)

  • Browser Artifacts

  • Metadata of Document

  • Account Information

  • Cloud Artifacts

  • Encrypted File

  • File Signature

  • Matches Hash

  • Event Log

  • NTFS meta file($MFT, $Logfile, $UsnJrnl)

  • Document indexing

  • Polaris Artifact

  • Internet History Carving

  • Document Carving

  • Timeline based

​

 

           Addition

• Windows XP, Vista, 7, 8,10, Sever 

• .Net Framework 4.5 ​(must installed 4.5 after)

• USB Licence  (for Commercial)

• Support 32/64 bit version

• Support Korean and English 

• Not install, Portable excutatble

​

​

​Download​

​

​

​

​

       

 

 

 

 

 

 

 

 

 

 

        Release note 

​

     05-14-2018​​   Bug fix

• E01, Ex01 file  recognition and read error fix

• E01, Ex01 file analyzer multi threading error fix

​

     05-11-2018  Add utility

• Dash board (summary result of category)

• Search personal information

• Install version

​​

​