Belkasoft X Help

Belkasoft X Help contents

Introduction

• What is Belkasoft X and who are its users?
  
• Types of tasks Belkasoft X is used for
  
• Typical Belkasoft X workflow
  
• Forensically sound software
  
• When Belkasoft X uses the Internet
  
• Why Belkasoft X?
  

Quick start

• Installing Belkasoft X
  
• Belkasoft X Trial version limitations
  
• Activating Belkasoft X license
  
  • Electronic license activation
    
  • Floating (dongle) license activation
    
• Home screen
  
• Creating a report
  
• Dashboard
  
• Artifacts
  
• File System
  
• Timeline
  
• Connection Graph
  
• Incident investigation
  

Belkasoft Evidence Center X editions

• X Computer
• X Mobile
• X Forensic
• X Corporate

Belkasoft X user interface

• Belkasoft X user interface

Home screen

• Home screen
• Creating a case
• Other options and functions on Home

Dashboard

• Dashboard
• Case properties
• Actions
• Automatic searches
• Data sources
• Application types
• Artifacts

Adding data source

• Adding data source
• Look for matches from a hashset database

Artifacts

• Artifacts window

File System

• File System window

Timeline

• Timeline window

Connection Graph

• Connection Graph window
• Contacts and entities
• Graph pane
• Contact or connection properties pane

Hex Viewer

• Hex Viewer window

SQLite Viewer

• SQLite Viewer window

Plist Viewer

• Plist Viewer window

Registry Viewer

• Registry Viewer window

Settings

• Settings
• General settings
• Appearance settings
• Analysis profiles
• Bookmark settings
• Carving settings
• Picture settings
• Video settings

Bookmarks

• Creating a bookmark
• Bookmarks window
  • Bookmarks pane
  • Bookmarked artifacts list
  • Selected artifact properties

Tasks

• Tasks window
• Task statuses
• Entering missing data
• Filtering tasks

Search

• Searching artifacts
• Regular expression syntax
• Search Results window

Geolocation data

• Reviewing geolocation data
• Pictures with GPS
• Showing geolocation artifacts on Open Street Maps or Google Earth
• Exporting geolocation artifacts to KML format

Filters

• Filtering data
• Adding multiple criteria

Reports

• Creating reports
• Report options
• Including a map to a report
• Including a connection graph to a report

Acquisition

• Acquiring data source
  • Acquiring disk drive
  • Acquiring mobile device
    • Acquiring iOS device
    • Acquiring Android device
  • Acquiring cloud

Export to Evidence Reader

• Portable case with Belkasoft Evidence Reader