Belkasoft Acquisition Tool helps investigators to complete one of the most important steps of investigation: obtaining data from a data source. Four types of data sources are currently supported:
- Hard or removable drives
- Mobile devices
- Computer RAM memory
- Cloud data
The acquired image can be then analyzed with Belkasoft Evidence Center or any third-party tool.
Hard and removable drive imaging
BelkaImager can acquire hard drives, SSD drives and removable drives connected to your computer, laptop or tablet.
The drive can be acquired as DD or E01 image. Physical acquisition is performed.
Mobile device acquisition
The product acquires data from Android and iOS devices (iPhones, iPADs), including iOS 10. Logical image is acquired.
For rooted Android devices the product can also acquire a physical image.
RAM memory of a running Windows computer, laptop or tablet can be dumped in a raw format.
Cloud data downloading
BelkaImager can download data from most important clouds such as Google, WhatsApp, Instagram and all popular email clouds.